7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 2929.515962] blktrace: Concurrent blktraces are not allowed on loop14 [ 2929.527988] blktrace: Concurrent blktraces are not allowed on loop4 12:07:43 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x15, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2929.642883] blktrace: Concurrent blktraces are not allowed on loop6 12:07:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x2000000000000000, &(0x7f0000000040)=ANY=[]) [ 2945.176576] loop1: detected capacity change from 0 to 512 [ 2945.198654] blktrace: Concurrent blktraces are not allowed on loop4 12:07:59 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:07:59 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x80000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:07:59 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x16, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:07:59 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x105, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:07:59 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 62) 12:07:59 executing program 5: mknod$loop(0x0, 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:07:59 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 2945.206942] FAULT_INJECTION: forcing a failure. [ 2945.206942] name failslab, interval 1, probability 0, space 0, times 0 [ 2945.209409] CPU: 0 PID: 13775 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2945.210847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.212574] Call Trace: [ 2945.213126] dump_stack+0x107/0x167 [ 2945.213881] should_fail.cold+0x5/0xa [ 2945.214686] should_failslab+0x5/0x20 [ 2945.215487] __kmalloc_node_track_caller+0x74/0x3b0 [ 2945.216529] ? alloc_skb_with_frags+0x92/0x570 [ 2945.217476] __alloc_skb+0xb1/0x5b0 [ 2945.218234] alloc_skb_with_frags+0x92/0x570 [ 2945.219151] sock_alloc_send_pskb+0x7af/0x930 [ 2945.220094] ? sk_alloc+0x350/0x350 [ 2945.220847] ? create_object.isra.0+0x3ad/0xa20 [ 2945.221826] ? lock_release+0x680/0x680 [ 2945.222651] ? find_held_lock+0x2c/0x110 [ 2945.223514] __ip_append_data+0x162d/0x3310 [ 2945.224424] ? lock_downgrade+0x6d0/0x6d0 [ 2945.225272] ? do_raw_spin_lock+0x121/0x260 [ 2945.226163] ? ip_frag_init+0x350/0x350 [ 2945.227004] ? __ip_finish_output.part.0+0xb70/0xb70 [ 2945.228061] ? ip_route_output_key_hash+0x19c/0x340 [ 2945.229085] ? ipv4_mtu+0x1ed/0x2c0 [ 2945.229847] ip_make_skb+0x22a/0x2a0 [ 2945.230625] ? ip_frag_init+0x350/0x350 [ 2945.231463] ? ip_flush_pending_frames+0x20/0x20 [ 2945.232460] ? lock_downgrade+0x6d0/0x6d0 [ 2945.233318] ? xfrm_lookup_route+0x65/0x210 [ 2945.234217] udp_sendmsg+0x161b/0x2220 [ 2945.235022] ? ip_frag_init+0x350/0x350 [ 2945.235863] ? udp_setsockopt+0xc0/0xc0 [ 2945.236726] ? sock_has_perm+0x1ea/0x280 [ 2945.237614] ? __import_iovec+0x458/0x590 [ 2945.238489] ? udp_setsockopt+0xc0/0xc0 [ 2945.239335] inet_sendmsg+0x105/0x140 [ 2945.240147] ? inet_send_prepare+0x540/0x540 [ 2945.241065] __sock_sendmsg+0x13c/0x190 [ 2945.241895] ____sys_sendmsg+0x334/0x870 [ 2945.242746] ? sock_write_iter+0x3d0/0x3d0 [ 2945.243646] ? do_recvmmsg+0x6d0/0x6d0 [ 2945.244461] ? __lock_acquire+0x1657/0x5b00 [ 2945.245372] ___sys_sendmsg+0xf3/0x170 [ 2945.246189] ? sendmsg_copy_msghdr+0x160/0x160 [ 2945.247146] ? __fget_files+0x2cf/0x520 [ 2945.247996] ? lock_acquire+0x197/0x470 [ 2945.248839] ? find_held_lock+0x2c/0x110 [ 2945.249692] ? __might_fault+0xd3/0x180 [ 2945.250524] ? lock_downgrade+0x6d0/0x6d0 [ 2945.251408] __sys_sendmmsg+0x195/0x470 [ 2945.252253] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2945.253171] ? lock_downgrade+0x6d0/0x6d0 [ 2945.254055] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2945.255069] ? wait_for_completion_io+0x270/0x270 [ 2945.256102] ? rcu_read_lock_any_held+0x75/0xa0 [ 2945.257056] loop1: detected capacity change from 0 to 512 [ 2945.258215] ? vfs_write+0x354/0xb10 [ 2945.258998] ? fput_many+0x2f/0x1a0 [ 2945.259768] ? ksys_write+0x1a9/0x260 [ 2945.260563] ? __ia32_sys_read+0xb0/0xb0 [ 2945.261420] __x64_sys_sendmmsg+0x99/0x100 [ 2945.262305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2945.263383] do_syscall_64+0x33/0x40 [ 2945.264178] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2945.265254] RIP: 0033:0x7fcb10dbfb19 [ 2945.266032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2945.269901] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2945.271508] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 2945.273009] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 2945.274517] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2945.276026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2945.277521] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 2945.286827] blktrace: Concurrent blktraces are not allowed on loop6 [ 2945.289525] blktrace: Concurrent blktraces are not allowed on loop14 [ 2945.396311] blktrace: Concurrent blktraces are not allowed on loop14 12:08:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x2010000000000000, &(0x7f0000000040)=ANY=[]) 12:08:15 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:08:15 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:08:15 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x106, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 2961.241974] blktrace: Concurrent blktraces are not allowed on loop4 [ 2961.253679] blktrace: Concurrent blktraces are not allowed on loop14 12:08:15 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x102, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:08:15 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 63) [ 2961.274240] loop1: detected capacity change from 0 to 512 [ 2961.279803] blktrace: Concurrent blktraces are not allowed on loop6 [ 2961.293695] FAULT_INJECTION: forcing a failure. [ 2961.293695] name failslab, interval 1, probability 0, space 0, times 0 [ 2961.295340] CPU: 1 PID: 13806 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2961.295776] loop1: detected capacity change from 0 to 512 [ 2961.296306] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2961.296311] Call Trace: [ 2961.296331] dump_stack+0x107/0x167 [ 2961.296344] should_fail.cold+0x5/0xa 12:08:15 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x1000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:08:15 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 2961.296371] should_failslab+0x5/0x20 [ 2961.300768] __kmalloc_node_track_caller+0x74/0x3b0 [ 2961.301469] ? alloc_skb_with_frags+0x92/0x570 [ 2961.302113] __alloc_skb+0xb1/0x5b0 [ 2961.302624] alloc_skb_with_frags+0x92/0x570 [ 2961.303241] sock_alloc_send_pskb+0x7af/0x930 [ 2961.303880] ? sk_alloc+0x350/0x350 [ 2961.304381] ? create_object.isra.0+0x3ad/0xa20 [ 2961.305015] ? lock_release+0x680/0x680 [ 2961.305556] ? find_held_lock+0x2c/0x110 [ 2961.306117] __ip_append_data+0x162d/0x3310 [ 2961.306710] ? lock_downgrade+0x6d0/0x6d0 [ 2961.307272] ? do_raw_spin_lock+0x121/0x260 [ 2961.307869] ? ip_frag_init+0x350/0x350 [ 2961.308426] ? __ip_finish_output.part.0+0xb70/0xb70 [ 2961.309122] ? ip_route_output_key_hash+0x19c/0x340 [ 2961.309808] ? ipv4_mtu+0x1ed/0x2c0 [ 2961.310314] ip_make_skb+0x22a/0x2a0 [ 2961.310826] ? ip_frag_init+0x350/0x350 [ 2961.311373] ? ip_flush_pending_frames+0x20/0x20 [ 2961.312030] ? lock_downgrade+0x6d0/0x6d0 [ 2961.312606] ? xfrm_lookup_route+0x65/0x210 [ 2961.313204] udp_sendmsg+0x161b/0x2220 [ 2961.313743] ? ip_frag_init+0x350/0x350 [ 2961.314295] ? udp_setsockopt+0xc0/0xc0 [ 2961.314854] ? sock_has_perm+0x1ea/0x280 [ 2961.315422] ? __import_iovec+0x458/0x590 [ 2961.315995] ? udp_setsockopt+0xc0/0xc0 [ 2961.316542] inet_sendmsg+0x105/0x140 [ 2961.317061] ? inet_send_prepare+0x540/0x540 [ 2961.317661] __sock_sendmsg+0x13c/0x190 [ 2961.318205] ____sys_sendmsg+0x334/0x870 [ 2961.318764] ? sock_write_iter+0x3d0/0x3d0 [ 2961.319344] ? do_recvmmsg+0x6d0/0x6d0 [ 2961.319885] ? __lock_acquire+0x1657/0x5b00 [ 2961.320481] ___sys_sendmsg+0xf3/0x170 [ 2961.321020] ? sendmsg_copy_msghdr+0x160/0x160 [ 2961.321646] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 12:08:15 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 2961.322363] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2961.323114] ? trace_hardirqs_on+0x5b/0x180 [ 2961.323727] ? lock_acquire+0x197/0x470 [ 2961.324272] ? find_held_lock+0x2c/0x110 [ 2961.324826] ? __might_fault+0xd3/0x180 [ 2961.325366] ? lock_downgrade+0x6d0/0x6d0 [ 2961.325939] __sys_sendmmsg+0x195/0x470 [ 2961.326487] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2961.327072] ? lock_downgrade+0x6d0/0x6d0 [ 2961.327647] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2961.328324] ? wait_for_completion_io+0x270/0x270 [ 2961.328988] ? rcu_read_lock_any_held+0x75/0xa0 [ 2961.329627] ? vfs_write+0x354/0xb10 [ 2961.330135] ? fput_many+0x2f/0x1a0 [ 2961.330630] ? ksys_write+0x1a9/0x260 [ 2961.331146] ? __ia32_sys_read+0xb0/0xb0 [ 2961.331713] __x64_sys_sendmmsg+0x99/0x100 [ 2961.332285] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2961.332995] do_syscall_64+0x33/0x40 [ 2961.333501] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2961.334207] RIP: 0033:0x7fcb10dbfb19 [ 2961.334720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2961.337238] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2961.338267] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 2961.339228] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 2961.340195] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2961.341159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2961.342121] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:08:15 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 2961.405017] blktrace: Concurrent blktraces are not allowed on loop14 12:08:15 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x10a, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2961.449492] blktrace: Concurrent blktraces are not allowed on loop4 12:08:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x2e00000000000000, &(0x7f0000000040)=ANY=[]) [ 2961.484529] blktrace: Concurrent blktraces are not allowed on loop6 [ 2961.538485] loop1: detected capacity change from 0 to 512 12:08:15 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 64) 12:08:15 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 2961.576664] loop1: detected capacity change from 0 to 512 12:08:15 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:08:15 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x2000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:08:15 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:08:15 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x107, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 2961.622997] FAULT_INJECTION: forcing a failure. [ 2961.622997] name failslab, interval 1, probability 0, space 0, times 0 [ 2961.624386] CPU: 1 PID: 13832 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2961.625200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2961.626164] Call Trace: [ 2961.626480] dump_stack+0x107/0x167 [ 2961.626901] should_fail.cold+0x5/0xa [ 2961.627346] ? create_object.isra.0+0x3a/0xa20 [ 2961.627885] should_failslab+0x5/0x20 [ 2961.628329] kmem_cache_alloc+0x5b/0x310 [ 2961.628806] create_object.isra.0+0x3a/0xa20 [ 2961.629310] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2961.629895] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2961.630479] ? alloc_skb_with_frags+0x92/0x570 [ 2961.631005] __alloc_skb+0xb1/0x5b0 [ 2961.631425] alloc_skb_with_frags+0x92/0x570 [ 2961.631943] sock_alloc_send_pskb+0x7af/0x930 [ 2961.632462] ? sk_alloc+0x350/0x350 [ 2961.632880] ? create_object.isra.0+0x3ad/0xa20 [ 2961.633416] ? lock_release+0x680/0x680 [ 2961.633872] ? find_held_lock+0x2c/0x110 [ 2961.634346] __ip_append_data+0x162d/0x3310 [ 2961.634844] ? lock_downgrade+0x6d0/0x6d0 [ 2961.635321] ? do_raw_spin_lock+0x121/0x260 [ 2961.635826] ? ip_frag_init+0x350/0x350 [ 2961.636286] ? __ip_finish_output.part.0+0xb70/0xb70 [ 2961.636870] ? ip_route_output_key_hash+0x19c/0x340 [ 2961.637441] ? ipv4_mtu+0x1ed/0x2c0 [ 2961.637871] ip_make_skb+0x22a/0x2a0 [ 2961.638305] ? ip_frag_init+0x350/0x350 [ 2961.638766] ? ip_flush_pending_frames+0x20/0x20 [ 2961.639312] ? lock_downgrade+0x6d0/0x6d0 [ 2961.639816] ? xfrm_lookup_route+0x65/0x210 [ 2961.640315] udp_sendmsg+0x161b/0x2220 [ 2961.640765] ? ip_frag_init+0x350/0x350 [ 2961.641223] ? udp_setsockopt+0xc0/0xc0 [ 2961.641691] ? sock_has_perm+0x1ea/0x280 [ 2961.642168] ? __import_iovec+0x458/0x590 [ 2961.642641] ? udp_setsockopt+0xc0/0xc0 [ 2961.643097] inet_sendmsg+0x105/0x140 [ 2961.643535] ? inet_send_prepare+0x540/0x540 [ 2961.644041] __sock_sendmsg+0x13c/0x190 [ 2961.644499] ____sys_sendmsg+0x334/0x870 [ 2961.644964] ? sock_write_iter+0x3d0/0x3d0 [ 2961.645446] ? do_recvmmsg+0x6d0/0x6d0 [ 2961.645891] ? __lock_acquire+0x1657/0x5b00 [ 2961.646389] ___sys_sendmsg+0xf3/0x170 [ 2961.646837] ? sendmsg_copy_msghdr+0x160/0x160 [ 2961.647363] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2961.647974] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2961.648485] ? trace_hardirqs_on+0x5b/0x180 [ 2961.648979] ? lock_acquire+0x197/0x470 [ 2961.649434] ? find_held_lock+0x2c/0x110 [ 2961.649903] ? __might_fault+0xd3/0x180 [ 2961.650361] ? lock_downgrade+0x6d0/0x6d0 [ 2961.650845] __sys_sendmmsg+0x195/0x470 [ 2961.651305] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2961.651807] ? lock_downgrade+0x6d0/0x6d0 [ 2961.652299] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2961.652869] ? wait_for_completion_io+0x270/0x270 [ 2961.653428] ? rcu_read_lock_any_held+0x75/0xa0 [ 2961.653965] ? vfs_write+0x354/0xb10 [ 2961.654403] ? fput_many+0x2f/0x1a0 [ 2961.654822] ? ksys_write+0x1a9/0x260 [ 2961.655260] ? __ia32_sys_read+0xb0/0xb0 [ 2961.655735] __x64_sys_sendmmsg+0x99/0x100 [ 2961.656219] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2961.656812] blktrace: Concurrent blktraces are not allowed on loop4 [ 2961.657553] do_syscall_64+0x33/0x40 [ 2961.657978] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2961.658563] RIP: 0033:0x7fcb10dbfb19 [ 2961.658990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2961.661097] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2961.661968] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 2961.662790] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 2961.663608] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2961.664441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2961.665255] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 2961.676423] blktrace: Concurrent blktraces are not allowed on loop14 12:08:15 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x3f00000000000000, &(0x7f0000000040)=ANY=[]) 12:08:15 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x114, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2961.723312] blktrace: Concurrent blktraces are not allowed on loop14 [ 2961.753112] loop1: detected capacity change from 0 to 512 12:08:15 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:08:15 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 65) 12:08:15 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:08:16 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x148, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2961.878513] FAULT_INJECTION: forcing a failure. [ 2961.878513] name failslab, interval 1, probability 0, space 0, times 0 [ 2961.880941] CPU: 0 PID: 13855 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2961.882402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2961.884174] Call Trace: [ 2961.884736] dump_stack+0x107/0x167 [ 2961.885510] should_fail.cold+0x5/0xa [ 2961.886311] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2961.887395] ? create_object.isra.0+0x3a/0xa20 [ 2961.888378] should_failslab+0x5/0x20 [ 2961.889180] kmem_cache_alloc+0x5b/0x310 [ 2961.890038] create_object.isra.0+0x3a/0xa20 [ 2961.890952] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2961.892049] kmem_cache_alloc+0x159/0x310 [ 2961.892931] skb_clone+0x14f/0x3d0 [ 2961.893688] ip_mc_output+0x5e8/0xd50 [ 2961.894489] ? ip_build_and_send_pkt+0x10d0/0x10d0 [ 2961.895529] ip_send_skb+0x339/0x570 [ 2961.896331] udp_send_skb+0x6ec/0x1250 [ 2961.897149] udp_sendmsg+0x1659/0x2220 [ 2961.897964] ? ip_frag_init+0x350/0x350 [ 2961.898807] ? udp_setsockopt+0xc0/0xc0 [ 2961.899673] ? sock_has_perm+0x1ea/0x280 [ 2961.900573] ? __import_iovec+0x458/0x590 [ 2961.901444] ? udp_setsockopt+0xc0/0xc0 [ 2961.902291] inet_sendmsg+0x105/0x140 [ 2961.903096] ? inet_send_prepare+0x540/0x540 [ 2961.904056] __sock_sendmsg+0x13c/0x190 [ 2961.904902] ____sys_sendmsg+0x334/0x870 [ 2961.905768] ? sock_write_iter+0x3d0/0x3d0 [ 2961.906668] ? do_recvmmsg+0x6d0/0x6d0 [ 2961.907496] ? __lock_acquire+0x1657/0x5b00 [ 2961.908458] ___sys_sendmsg+0xf3/0x170 [ 2961.909290] ? sendmsg_copy_msghdr+0x160/0x160 [ 2961.910271] ? __fget_files+0x2cf/0x520 [ 2961.911120] ? lock_acquire+0x197/0x470 [ 2961.911992] ? find_held_lock+0x2c/0x110 [ 2961.912857] ? __might_fault+0xd3/0x180 [ 2961.913713] ? lock_downgrade+0x6d0/0x6d0 [ 2961.914613] __sys_sendmmsg+0x195/0x470 [ 2961.915465] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2961.916413] ? lock_downgrade+0x6d0/0x6d0 [ 2961.917311] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2961.918330] ? wait_for_completion_io+0x270/0x270 [ 2961.919351] ? rcu_read_lock_any_held+0x75/0xa0 [ 2961.920363] ? vfs_write+0x354/0xb10 [ 2961.921154] ? fput_many+0x2f/0x1a0 [ 2961.921936] ? ksys_write+0x1a9/0x260 [ 2961.922744] ? __ia32_sys_read+0xb0/0xb0 [ 2961.923613] __x64_sys_sendmmsg+0x99/0x100 [ 2961.924540] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2961.925623] do_syscall_64+0x33/0x40 [ 2961.926419] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2961.927506] RIP: 0033:0x7fcb10dbfb19 [ 2961.928321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2961.932232] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2961.933839] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 2961.935342] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 2961.936873] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2961.938371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2961.939909] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 2961.961788] blktrace: Concurrent blktraces are not allowed on loop6 12:08:16 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x3f0b000000000000, &(0x7f0000000040)=ANY=[]) [ 2961.976580] blktrace: Concurrent blktraces are not allowed on loop4 [ 2974.845576] blktrace: Concurrent blktraces are not allowed on loop4 [ 2974.871896] blktrace: Concurrent blktraces are not allowed on loop6 12:08:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 66) 12:08:28 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x3000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:08:28 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:08:28 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:08:28 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x2500, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:08:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x4000000000000000, &(0x7f0000000040)=ANY=[]) 12:08:28 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:08:29 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x14c, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2974.887679] loop1: detected capacity change from 0 to 512 [ 2974.888440] FAULT_INJECTION: forcing a failure. [ 2974.888440] name failslab, interval 1, probability 0, space 0, times 0 [ 2974.890512] CPU: 1 PID: 13886 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2974.891299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2974.892263] Call Trace: [ 2974.892567] dump_stack+0x107/0x167 [ 2974.892983] should_fail.cold+0x5/0xa [ 2974.893418] ? dst_alloc+0x9e/0x5d0 [ 2974.893832] should_failslab+0x5/0x20 [ 2974.894267] kmem_cache_alloc+0x5b/0x310 [ 2974.894730] dst_alloc+0x9e/0x5d0 [ 2974.895130] rt_dst_clone+0x59/0x870 [ 2974.895556] ip_mc_finish_output+0x95/0x280 [ 2974.896067] ip_mc_output+0x962/0xd50 [ 2974.896503] ? ip_build_and_send_pkt+0x10d0/0x10d0 [ 2974.897062] ip_send_skb+0x339/0x570 [ 2974.897486] udp_send_skb+0x6ec/0x1250 [ 2974.897936] udp_sendmsg+0x1659/0x2220 [ 2974.898377] ? ip_frag_init+0x350/0x350 [ 2974.898567] blktrace: Concurrent blktraces are not allowed on loop14 [ 2974.898840] ? udp_setsockopt+0xc0/0xc0 [ 2974.900923] ? sock_has_perm+0x1ea/0x280 [ 2974.901397] ? __import_iovec+0x458/0x590 [ 2974.901864] ? udp_setsockopt+0xc0/0xc0 [ 2974.902332] inet_sendmsg+0x105/0x140 [ 2974.902774] ? inet_send_prepare+0x540/0x540 [ 2974.903277] __sock_sendmsg+0x13c/0x190 [ 2974.903730] ____sys_sendmsg+0x334/0x870 [ 2974.904203] ? sock_write_iter+0x3d0/0x3d0 [ 2974.904682] ? do_recvmmsg+0x6d0/0x6d0 [ 2974.905127] ? __lock_acquire+0x1657/0x5b00 [ 2974.905622] ___sys_sendmsg+0xf3/0x170 [ 2974.906067] ? sendmsg_copy_msghdr+0x160/0x160 [ 2974.906587] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2974.907179] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2974.907688] ? trace_hardirqs_on+0x5b/0x180 [ 2974.908191] ? lock_acquire+0x197/0x470 [ 2974.908640] ? find_held_lock+0x2c/0x110 [ 2974.909104] ? __might_fault+0xd3/0x180 [ 2974.909553] ? lock_downgrade+0x6d0/0x6d0 [ 2974.910031] __sys_sendmmsg+0x195/0x470 [ 2974.910486] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2974.910976] ? lock_downgrade+0x6d0/0x6d0 [ 2974.911456] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2974.912017] ? wait_for_completion_io+0x270/0x270 [ 2974.912566] ? rcu_read_lock_any_held+0x75/0xa0 [ 2974.913098] ? vfs_write+0x354/0xb10 [ 2974.913524] ? fput_many+0x2f/0x1a0 [ 2974.913938] ? ksys_write+0x1a9/0x260 [ 2974.914372] ? __ia32_sys_read+0xb0/0xb0 [ 2974.914837] __x64_sys_sendmmsg+0x99/0x100 [ 2974.915319] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2974.915914] do_syscall_64+0x33/0x40 [ 2974.916344] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2974.916926] RIP: 0033:0x7fcb10dbfb19 [ 2974.917355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2974.919434] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2974.920314] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 2974.921121] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 2974.921934] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2974.922742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2974.923554] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 2974.933883] loop1: detected capacity change from 0 to 512 12:08:29 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x168, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2975.010690] blktrace: Concurrent blktraces are not allowed on loop6 [ 2975.019711] blktrace: Concurrent blktraces are not allowed on loop14 [ 2988.720196] FAULT_INJECTION: forcing a failure. [ 2988.720196] name failslab, interval 1, probability 0, space 0, times 0 [ 2988.721882] CPU: 0 PID: 13905 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2988.722851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2988.724044] Call Trace: [ 2988.724418] dump_stack+0x107/0x167 [ 2988.724936] should_fail.cold+0x5/0xa [ 2988.725483] ? dst_alloc+0x9e/0x5d0 [ 2988.725994] should_failslab+0x5/0x20 [ 2988.726529] kmem_cache_alloc+0x5b/0x310 [ 2988.727114] dst_alloc+0x9e/0x5d0 [ 2988.727617] rt_dst_clone+0x59/0x870 [ 2988.728159] ip_mc_finish_output+0x95/0x280 [ 2988.728762] ip_mc_output+0x962/0xd50 [ 2988.729306] ? ip_build_and_send_pkt+0x10d0/0x10d0 [ 2988.729997] ip_send_skb+0x339/0x570 [ 2988.730523] udp_send_skb+0x6ec/0x1250 [ 2988.731072] udp_sendmsg+0x1659/0x2220 [ 2988.731617] ? ip_frag_init+0x350/0x350 [ 2988.732202] ? udp_setsockopt+0xc0/0xc0 [ 2988.732771] ? sock_has_perm+0x1ea/0x280 [ 2988.733357] ? __import_iovec+0x458/0x590 [ 2988.733943] ? udp_setsockopt+0xc0/0xc0 [ 2988.734500] inet_sendmsg+0x105/0x140 [ 2988.735036] ? inet_send_prepare+0x540/0x540 [ 2988.735656] __sock_sendmsg+0x13c/0x190 [ 2988.736219] ____sys_sendmsg+0x334/0x870 [ 2988.736795] ? sock_write_iter+0x3d0/0x3d0 [ 2988.737384] ? do_recvmmsg+0x6d0/0x6d0 [ 2988.737940] ? find_held_lock+0x2c/0x110 [ 2988.738529] ___sys_sendmsg+0xf3/0x170 [ 2988.739079] ? sendmsg_copy_msghdr+0x160/0x160 [ 2988.739727] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2988.740465] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2988.741101] ? trace_hardirqs_on+0x5b/0x180 [ 2988.741711] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2988.742342] ? finish_task_switch+0x126/0x5d0 [ 2988.742964] ? finish_task_switch+0xef/0x5d0 [ 2988.743577] ? __switch_to+0x572/0xf70 [ 2988.744129] ? __switch_to_asm+0x3a/0x60 [ 2988.744693] ? __switch_to_asm+0x34/0x60 [ 2988.745258] ? __schedule+0x82c/0x1ea0 [ 2988.746070] ? io_schedule_timeout+0x140/0x140 [ 2988.746745] __sys_sendmmsg+0x195/0x470 [ 2988.747303] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2988.747902] ? lock_downgrade+0x6d0/0x6d0 [ 2988.748493] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2988.749178] ? wait_for_completion_io+0x270/0x270 [ 2988.749851] ? rcu_read_lock_any_held+0x75/0xa0 [ 2988.750503] ? vfs_write+0x354/0xb10 [ 2988.751028] ? fput_many+0x2f/0x1a0 [ 2988.751539] ? ksys_write+0x1a9/0x260 [ 2988.752074] ? __ia32_sys_read+0xb0/0xb0 [ 2988.752652] __x64_sys_sendmmsg+0x99/0x100 [ 2988.753236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2988.753945] do_syscall_64+0x33/0x40 [ 2988.754469] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2988.755192] RIP: 0033:0x7fcb10dbfb19 [ 2988.755722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2988.758269] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2988.759329] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 2988.760328] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 2988.761323] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2988.762328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2988.763317] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 2988.763443] loop1: detected capacity change from 0 to 512 [ 2988.771310] blktrace: Concurrent blktraces are not allowed on loop4 [ 2988.771900] blktrace: Concurrent blktraces are not allowed on loop14 12:08:42 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:08:42 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:08:42 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:08:42 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x16a, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:08:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x4800000000000000, &(0x7f0000000040)=ANY=[]) 12:08:42 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x20000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:08:42 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x4800, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:08:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 67) [ 2988.786435] loop1: detected capacity change from 0 to 512 [ 2988.789334] blktrace: Concurrent blktraces are not allowed on loop6 12:08:43 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 2988.865584] blktrace: Concurrent blktraces are not allowed on loop14 12:08:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x4c00000000000000, &(0x7f0000000040)=ANY=[]) 12:08:43 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x16c, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:08:43 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:08:43 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 2988.911717] loop1: detected capacity change from 0 to 512 [ 2988.928352] blktrace: Concurrent blktraces are not allowed on loop6 [ 2988.941420] loop1: detected capacity change from 0 to 512 12:08:43 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x40000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:08:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x6800000000000000, &(0x7f0000000040)=ANY=[]) 12:08:43 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x174, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 2989.041579] blktrace: Concurrent blktraces are not allowed on loop6 12:08:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 68) 12:08:43 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xa603, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:08:43 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 2989.090244] FAULT_INJECTION: forcing a failure. [ 2989.090244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2989.091693] CPU: 0 PID: 13949 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 2989.092532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2989.093514] Call Trace: [ 2989.093837] dump_stack+0x107/0x167 [ 2989.094279] should_fail.cold+0x5/0xa [ 2989.094739] _copy_from_user+0x2e/0x1b0 [ 2989.095226] __copy_msghdr_from_user+0x91/0x4b0 [ 2989.095776] ? __ia32_sys_shutdown+0x80/0x80 [ 2989.096313] ? udp_setsockopt+0xc0/0xc0 [ 2989.096786] ? inet_sendmsg+0xbd/0x140 [ 2989.097248] ? inet_send_prepare+0x540/0x540 [ 2989.097790] ? __sock_sendmsg+0x55/0x190 [ 2989.098279] sendmsg_copy_msghdr+0xa1/0x160 [ 2989.098788] ? do_recvmmsg+0x6d0/0x6d0 [ 2989.099248] ? __lock_acquire+0x1657/0x5b00 [ 2989.099765] ___sys_sendmsg+0xc6/0x170 [ 2989.100236] ? sendmsg_copy_msghdr+0x160/0x160 [ 2989.100776] ? __fget_files+0x2cf/0x520 [ 2989.101251] ? lock_acquire+0x197/0x470 [ 2989.101743] ? find_held_lock+0x2c/0x110 [ 2989.102227] ? __might_fault+0xd3/0x180 [ 2989.102698] ? lock_downgrade+0x6d0/0x6d0 [ 2989.103202] __sys_sendmmsg+0x195/0x470 [ 2989.103684] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2989.104200] ? lock_downgrade+0x6d0/0x6d0 [ 2989.104701] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2989.105279] ? wait_for_completion_io+0x270/0x270 [ 2989.105846] ? rcu_read_lock_any_held+0x75/0xa0 [ 2989.106396] ? vfs_write+0x354/0xb10 [ 2989.106838] ? fput_many+0x2f/0x1a0 [ 2989.107263] ? ksys_write+0x1a9/0x260 [ 2989.107713] ? __ia32_sys_read+0xb0/0xb0 [ 2989.108203] __x64_sys_sendmmsg+0x99/0x100 [ 2989.108708] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2989.109311] do_syscall_64+0x33/0x40 12:08:43 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 2989.109745] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2989.110538] RIP: 0033:0x7fcb10dbfb19 [ 2989.110982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2989.113171] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2989.114072] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 2989.114914] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 2989.115758] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 2989.116612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2989.117455] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 2989.119610] loop1: detected capacity change from 0 to 512 [ 2989.178858] blktrace: Concurrent blktraces are not allowed on loop14 12:08:43 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:08:43 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x17a, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:08:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x6c00000000000000, &(0x7f0000000040)=ANY=[]) [ 2989.224122] blktrace: Concurrent blktraces are not allowed on loop14 [ 2989.323016] loop1: detected capacity change from 0 to 512 [ 2989.353584] loop1: detected capacity change from 0 to 512 12:08:57 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x90000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:08:57 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1b0, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:08:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x7400000000000000, &(0x7f0000000040)=ANY=[]) 12:08:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 69) 12:08:57 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:08:57 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x2}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:08:57 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x7b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:08:57 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3003.037028] loop1: detected capacity change from 0 to 512 [ 3003.047491] blktrace: Concurrent blktraces are not allowed on loop14 [ 3003.076682] FAULT_INJECTION: forcing a failure. [ 3003.076682] name failslab, interval 1, probability 0, space 0, times 0 [ 3003.079760] CPU: 1 PID: 13987 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3003.081369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3003.083277] Call Trace: [ 3003.083884] dump_stack+0x107/0x167 [ 3003.084735] should_fail.cold+0x5/0xa [ 3003.085614] ? dst_alloc+0x9e/0x5d0 [ 3003.086460] should_failslab+0x5/0x20 [ 3003.087338] kmem_cache_alloc+0x5b/0x310 [ 3003.088297] dst_alloc+0x9e/0x5d0 [ 3003.089093] ? trace_hardirqs_on+0x5b/0x180 [ 3003.090087] rt_dst_alloc+0x73/0x440 [ 3003.090951] ip_route_output_key_hash_rcu+0x98d/0x25b0 [ 3003.092182] ip_route_output_key_hash+0x185/0x340 [ 3003.093292] ? ip_route_output_key_hash_rcu+0x25b0/0x25b0 [ 3003.094563] ? lock_downgrade+0x6d0/0x6d0 [ 3003.095529] ip_route_output_flow+0x23/0x150 [ 3003.096553] udp_sendmsg+0x190d/0x2220 [ 3003.097452] ? ip_frag_init+0x350/0x350 [ 3003.098370] ? udp_setsockopt+0xc0/0xc0 [ 3003.099304] ? sock_has_perm+0x1ea/0x280 [ 3003.100251] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3003.101465] ? __import_iovec+0x458/0x590 [ 3003.102417] ? udp_setsockopt+0xc0/0xc0 [ 3003.103333] inet_sendmsg+0x105/0x140 [ 3003.104221] ? inet_send_prepare+0x540/0x540 [ 3003.105240] __sock_sendmsg+0x13c/0x190 [ 3003.106164] ____sys_sendmsg+0x334/0x870 [ 3003.107107] ? sock_write_iter+0x3d0/0x3d0 [ 3003.108087] ? do_recvmmsg+0x6d0/0x6d0 [ 3003.109005] ? __lock_acquire+0x1657/0x5b00 [ 3003.110013] ___sys_sendmsg+0xf3/0x170 [ 3003.110916] ? sendmsg_copy_msghdr+0x160/0x160 [ 3003.111979] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3003.113200] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3003.114225] ? trace_hardirqs_on+0x5b/0x180 [ 3003.115226] ? lock_acquire+0x197/0x470 [ 3003.116149] ? find_held_lock+0x2c/0x110 [ 3003.117091] ? __might_fault+0xd3/0x180 [ 3003.118006] ? lock_downgrade+0x6d0/0x6d0 [ 3003.118982] __sys_sendmmsg+0x195/0x470 [ 3003.119905] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3003.120908] ? lock_downgrade+0x6d0/0x6d0 [ 3003.121877] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3003.122989] ? wait_for_completion_io+0x270/0x270 [ 3003.124114] ? rcu_read_lock_any_held+0x75/0xa0 [ 3003.125186] ? vfs_write+0x354/0xb10 [ 3003.126044] ? fput_many+0x2f/0x1a0 [ 3003.126880] ? ksys_write+0x1a9/0x260 [ 3003.127757] ? __ia32_sys_read+0xb0/0xb0 [ 3003.128718] __x64_sys_sendmmsg+0x99/0x100 [ 3003.129689] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3003.130871] do_syscall_64+0x33/0x40 [ 3003.131726] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3003.132915] RIP: 0033:0x7fcb10dbfb19 [ 3003.133773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3003.138022] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3003.139772] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3003.141422] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3003.143063] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3003.144713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3003.146352] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3003.151107] loop1: detected capacity change from 0 to 512 12:08:57 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3003.173829] blktrace: Concurrent blktraces are not allowed on loop14 12:08:57 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:08:57 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x3}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:08:57 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1d0, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:08:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x7a00000000000000, &(0x7f0000000040)=ANY=[]) [ 3003.350028] blktrace: Concurrent blktraces are not allowed on loop14 12:08:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 70) [ 3003.373348] loop1: detected capacity change from 0 to 512 12:08:57 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0xfdfdffff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) [ 3003.392827] blktrace: Concurrent blktraces are not allowed on loop6 12:08:57 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3003.415410] loop1: detected capacity change from 0 to 512 [ 3003.472605] blktrace: Concurrent blktraces are not allowed on loop14 [ 3003.487620] FAULT_INJECTION: forcing a failure. [ 3003.487620] name failslab, interval 1, probability 0, space 0, times 0 [ 3003.490375] CPU: 1 PID: 14018 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3003.491933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3003.493811] Call Trace: [ 3003.494414] dump_stack+0x107/0x167 [ 3003.495240] should_fail.cold+0x5/0xa [ 3003.496113] ? create_object.isra.0+0x3a/0xa20 [ 3003.497156] should_failslab+0x5/0x20 [ 3003.498018] kmem_cache_alloc+0x5b/0x310 [ 3003.498938] ? lock_acquire+0x197/0x470 [ 3003.499840] create_object.isra.0+0x3a/0xa20 [ 3003.500839] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3003.501993] kmem_cache_alloc+0x159/0x310 [ 3003.502939] dst_alloc+0x9e/0x5d0 [ 3003.503726] ? trace_hardirqs_on+0x5b/0x180 [ 3003.504708] rt_dst_alloc+0x73/0x440 [ 3003.505559] ip_route_output_key_hash_rcu+0x98d/0x25b0 [ 3003.506760] ip_route_output_key_hash+0x185/0x340 [ 3003.507863] ? ip_route_output_key_hash_rcu+0x25b0/0x25b0 [ 3003.509128] ? lock_downgrade+0x6d0/0x6d0 [ 3003.510087] ip_route_output_flow+0x23/0x150 [ 3003.511083] udp_sendmsg+0x190d/0x2220 [ 3003.511976] ? ip_frag_init+0x350/0x350 [ 3003.512900] ? udp_setsockopt+0xc0/0xc0 [ 3003.513819] ? sock_has_perm+0x1ea/0x280 [ 3003.514741] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3003.515928] ? __import_iovec+0x458/0x590 [ 3003.516865] ? udp_setsockopt+0xc0/0xc0 [ 3003.517772] inet_sendmsg+0x105/0x140 [ 3003.518627] ? inet_send_prepare+0x540/0x540 [ 3003.519620] __sock_sendmsg+0x13c/0x190 [ 3003.520531] ____sys_sendmsg+0x334/0x870 [ 3003.521463] ? sock_write_iter+0x3d0/0x3d0 [ 3003.522413] ? do_recvmmsg+0x6d0/0x6d0 [ 3003.523305] ? __lock_acquire+0x1657/0x5b00 [ 3003.524304] ___sys_sendmsg+0xf3/0x170 [ 3003.525187] ? sendmsg_copy_msghdr+0x160/0x160 [ 3003.526220] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3003.527233] ? _raw_spin_unlock_irq+0x27/0x30 [ 3003.528263] ? lock_acquire+0x197/0x470 [ 3003.529159] ? find_held_lock+0x2c/0x110 [ 3003.530076] ? __might_fault+0xd3/0x180 [ 3003.530978] ? lock_downgrade+0x6d0/0x6d0 [ 3003.531947] __sys_sendmmsg+0x195/0x470 [ 3003.532861] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3003.533831] ? lock_downgrade+0x6d0/0x6d0 [ 3003.534774] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3003.535868] ? wait_for_completion_io+0x270/0x270 [ 3003.536967] ? rcu_read_lock_any_held+0x75/0xa0 [ 3003.538012] ? vfs_write+0x354/0xb10 [ 3003.538859] ? fput_many+0x2f/0x1a0 [ 3003.539685] ? ksys_write+0x1a9/0x260 [ 3003.540560] ? __ia32_sys_read+0xb0/0xb0 [ 3003.541483] __x64_sys_sendmmsg+0x99/0x100 [ 3003.542442] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3003.543601] do_syscall_64+0x33/0x40 [ 3003.544447] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3003.545599] RIP: 0033:0x7fcb10dbfb19 [ 3003.546443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3003.550602] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3003.552335] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3003.553949] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3003.555575] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3003.557191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3003.558794] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:08:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x8cffffff00000000, &(0x7f0000000040)=ANY=[]) 12:08:57 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:08:57 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x4}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:08:57 executing program 2: mknod$loop(0x0, 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:08:57 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x300, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 3003.701446] loop1: detected capacity change from 0 to 512 12:08:57 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0xfffffdfd) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) [ 3003.718204] loop1: detected capacity change from 0 to 512 [ 3003.729323] blktrace: Concurrent blktraces are not allowed on loop14 [ 3003.746552] blktrace: Concurrent blktraces are not allowed on loop6 [ 3003.801753] blktrace: Concurrent blktraces are not allowed on loop14 12:09:13 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x80000000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:09:13 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:09:13 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 71) [ 3019.796477] blktrace: Concurrent blktraces are not allowed on loop6 12:09:13 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:09:13 executing program 2: mknod$loop(0x0, 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:09:13 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x97ffffff00000000, &(0x7f0000000040)=ANY=[]) 12:09:13 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x500, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:09:13 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x5}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3019.806752] blktrace: Concurrent blktraces are not allowed on loop12 [ 3019.818801] blktrace: Concurrent blktraces are not allowed on loop14 [ 3019.833846] loop1: detected capacity change from 0 to 512 [ 3019.859530] FAULT_INJECTION: forcing a failure. [ 3019.859530] name failslab, interval 1, probability 0, space 0, times 0 [ 3019.861596] CPU: 0 PID: 14071 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3019.862773] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3019.864201] Call Trace: [ 3019.864664] dump_stack+0x107/0x167 [ 3019.865288] should_fail.cold+0x5/0xa [ 3019.865945] ? create_object.isra.0+0x3a/0xa20 [ 3019.866730] should_failslab+0x5/0x20 [ 3019.867382] kmem_cache_alloc+0x5b/0x310 [ 3019.867690] loop1: detected capacity change from 0 to 512 [ 3019.868078] ? lock_acquire+0x197/0x470 [ 3019.868099] create_object.isra.0+0x3a/0xa20 [ 3019.870696] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3019.871571] kmem_cache_alloc+0x159/0x310 [ 3019.872304] dst_alloc+0x9e/0x5d0 [ 3019.872895] ? trace_hardirqs_on+0x5b/0x180 [ 3019.873636] rt_dst_alloc+0x73/0x440 [ 3019.874347] ip_route_output_key_hash_rcu+0x98d/0x25b0 [ 3019.875252] ip_route_output_key_hash+0x185/0x340 [ 3019.876071] ? ip_route_output_key_hash_rcu+0x25b0/0x25b0 [ 3019.877015] ? lock_downgrade+0x6d0/0x6d0 [ 3019.877732] ip_route_output_flow+0x23/0x150 [ 3019.878481] udp_sendmsg+0x190d/0x2220 [ 3019.879147] ? ip_frag_init+0x350/0x350 [ 3019.879822] ? udp_setsockopt+0xc0/0xc0 [ 3019.880526] ? sock_has_perm+0x1ea/0x280 [ 3019.881211] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3019.882098] ? __import_iovec+0x458/0x590 [ 3019.882801] ? udp_setsockopt+0xc0/0xc0 [ 3019.883476] inet_sendmsg+0x105/0x140 [ 3019.884119] ? inet_send_prepare+0x540/0x540 [ 3019.884878] __sock_sendmsg+0x13c/0x190 [ 3019.885549] ____sys_sendmsg+0x334/0x870 [ 3019.886244] ? sock_write_iter+0x3d0/0x3d0 [ 3019.886964] ? do_recvmmsg+0x6d0/0x6d0 [ 3019.887625] ? find_held_lock+0x2c/0x110 [ 3019.888336] ___sys_sendmsg+0xf3/0x170 [ 3019.888999] ? sendmsg_copy_msghdr+0x160/0x160 [ 3019.889783] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3019.890666] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3019.891424] ? trace_hardirqs_on+0x5b/0x180 [ 3019.892152] ? finish_task_switch+0x1a4/0x5d0 [ 3019.892923] ? __switch_to+0x572/0xf70 [ 3019.893592] ? __switch_to_asm+0x3a/0x60 [ 3019.894284] ? __switch_to_asm+0x34/0x60 [ 3019.894988] ? __schedule+0x82c/0x1ea0 [ 3019.895666] ? io_schedule_timeout+0x140/0x140 [ 3019.896463] __sys_sendmmsg+0x195/0x470 [ 3019.897147] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3019.897878] ? lock_downgrade+0x6d0/0x6d0 [ 3019.898593] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3019.899434] ? wait_for_completion_io+0x270/0x270 [ 3019.900263] ? rcu_read_lock_any_held+0x75/0xa0 [ 3019.901057] ? vfs_write+0x354/0xb10 [ 3019.901687] ? fput_many+0x2f/0x1a0 [ 3019.902311] ? ksys_write+0x1a9/0x260 [ 3019.902958] ? __ia32_sys_read+0xb0/0xb0 [ 3019.903659] __x64_sys_sendmmsg+0x99/0x100 [ 3019.904398] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3019.905280] do_syscall_64+0x33/0x40 [ 3019.905922] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3019.906785] RIP: 0033:0x7fcb10dbfb19 [ 3019.907413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3019.910541] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3019.911843] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3019.913054] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3019.914260] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3019.915454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3019.916657] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:09:14 executing program 2: mknod$loop(0x0, 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:09:14 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xa00, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 3019.966750] blktrace: Concurrent blktraces are not allowed on loop14 12:09:14 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x9d6e519400000000, &(0x7f0000000040)=ANY=[]) [ 3020.137891] loop1: detected capacity change from 0 to 512 12:09:27 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:09:27 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:09:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0xf6ffffff00000000, &(0x7f0000000040)=ANY=[]) 12:09:27 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x6}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:09:27 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x4000000000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:09:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 72) 12:09:27 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xb91, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:09:27 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:09:27 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3033.604544] loop1: detected capacity change from 0 to 512 [ 3033.606293] blktrace: Concurrent blktraces are not allowed on loop12 [ 3033.610676] blktrace: Concurrent blktraces are not allowed on loop6 [ 3033.612707] blktrace: Concurrent blktraces are not allowed on loop14 [ 3033.649473] loop1: detected capacity change from 0 to 512 [ 3033.654280] FAULT_INJECTION: forcing a failure. [ 3033.654280] name failslab, interval 1, probability 0, space 0, times 0 [ 3033.655853] CPU: 0 PID: 14110 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3033.656754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3033.657833] Call Trace: [ 3033.658173] dump_stack+0x107/0x167 [ 3033.658635] should_fail.cold+0x5/0xa [ 3033.659129] ? create_object.isra.0+0x3a/0xa20 [ 3033.659707] should_failslab+0x5/0x20 [ 3033.660187] kmem_cache_alloc+0x5b/0x310 [ 3033.660722] create_object.isra.0+0x3a/0xa20 [ 3033.661281] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3033.661940] kmem_cache_alloc_node+0x169/0x330 [ 3033.662528] __alloc_skb+0x6d/0x5b0 [ 3033.663008] alloc_skb_with_frags+0x92/0x570 [ 3033.663571] sock_alloc_send_pskb+0x7af/0x930 [ 3033.664142] ? sk_alloc+0x350/0x350 [ 3033.664611] ? create_object.isra.0+0x3ad/0xa20 [ 3033.665197] ? lock_release+0x680/0x680 [ 3033.665697] ? find_held_lock+0x2c/0x110 [ 3033.666221] __ip_append_data+0x162d/0x3310 [ 3033.666762] ? lock_downgrade+0x6d0/0x6d0 [ 3033.667283] ? do_raw_spin_lock+0x121/0x260 [ 3033.667836] ? ip_frag_init+0x350/0x350 [ 3033.668338] ? __ip_finish_output.part.0+0xb70/0xb70 [ 3033.669001] ? ip_route_output_key_hash+0x19c/0x340 [ 3033.669633] ? ipv4_mtu+0x1ed/0x2c0 [ 3033.670102] ip_make_skb+0x22a/0x2a0 [ 3033.670572] ? ip_frag_init+0x350/0x350 [ 3033.671075] ? ip_flush_pending_frames+0x20/0x20 [ 3033.671686] ? lock_downgrade+0x6d0/0x6d0 [ 3033.672207] ? xfrm_lookup_route+0x65/0x210 [ 3033.672762] udp_sendmsg+0x161b/0x2220 [ 3033.673254] ? ip_frag_init+0x350/0x350 [ 3033.673758] ? udp_setsockopt+0xc0/0xc0 [ 3033.674280] ? sock_has_perm+0x1ea/0x280 [ 3033.674805] ? __import_iovec+0x458/0x590 [ 3033.675331] ? udp_setsockopt+0xc0/0xc0 [ 3033.675832] inet_sendmsg+0x105/0x140 [ 3033.676307] ? inet_send_prepare+0x540/0x540 [ 3033.676871] __sock_sendmsg+0x13c/0x190 [ 3033.677369] ____sys_sendmsg+0x334/0x870 [ 3033.677877] ? sock_write_iter+0x3d0/0x3d0 [ 3033.678413] ? do_recvmmsg+0x6d0/0x6d0 [ 3033.678913] ? find_held_lock+0x2c/0x110 [ 3033.679436] ___sys_sendmsg+0xf3/0x170 [ 3033.679933] ? sendmsg_copy_msghdr+0x160/0x160 [ 3033.680516] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3033.681167] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3033.681724] ? trace_hardirqs_on+0x5b/0x180 [ 3033.682262] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3033.682818] ? finish_task_switch+0x126/0x5d0 [ 3033.683373] ? finish_task_switch+0xef/0x5d0 [ 3033.683921] ? __switch_to+0x572/0xf70 [ 3033.684428] ? __switch_to_asm+0x3a/0x60 [ 3033.684938] ? __switch_to_asm+0x34/0x60 [ 3033.685455] ? __schedule+0x82c/0x1ea0 [ 3033.685955] ? io_schedule_timeout+0x140/0x140 [ 3033.686538] __sys_sendmmsg+0x195/0x470 [ 3033.687036] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3033.687581] ? lock_downgrade+0x6d0/0x6d0 [ 3033.688108] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3033.688724] ? wait_for_completion_io+0x270/0x270 [ 3033.689321] ? rcu_read_lock_any_held+0x75/0xa0 [ 3033.689886] ? vfs_write+0x354/0xb10 [ 3033.690360] ? fput_many+0x2f/0x1a0 [ 3033.690820] ? ksys_write+0x1a9/0x260 [ 3033.691293] ? __ia32_sys_read+0xb0/0xb0 [ 3033.691803] __x64_sys_sendmmsg+0x99/0x100 [ 3033.692337] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3033.693001] do_syscall_64+0x33/0x40 [ 3033.693467] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3033.694105] RIP: 0033:0x7fcb10dbfb19 [ 3033.694566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3033.696839] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3033.697773] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3033.698653] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3033.699547] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3033.700449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3033.701344] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3033.727993] blktrace: Concurrent blktraces are not allowed on loop14 12:09:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0xf9fdffff00000000, &(0x7f0000000040)=ANY=[]) 12:09:27 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:09:27 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:09:28 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x1400, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 3033.903475] blktrace: Concurrent blktraces are not allowed on loop6 12:09:28 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3033.915035] loop1: detected capacity change from 0 to 512 12:09:28 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x100000000000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:09:28 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x7}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:09:28 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0xfcfdffff00000000, &(0x7f0000000040)=ANY=[]) [ 3033.978544] blktrace: Concurrent blktraces are not allowed on loop14 [ 3034.007454] blktrace: Concurrent blktraces are not allowed on loop14 [ 3034.058379] loop1: detected capacity change from 0 to 512 12:09:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 73) 12:09:42 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x2000, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:09:42 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:09:42 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x300}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:09:42 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:09:42 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:09:42 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:09:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0xfdfdffff00000000, &(0x7f0000000040)=ANY=[]) [ 3048.340857] loop1: detected capacity change from 0 to 512 [ 3048.345565] blktrace: Concurrent blktraces are not allowed on loop14 [ 3048.366635] loop1: detected capacity change from 0 to 512 [ 3048.371765] blktrace: Concurrent blktraces are not allowed on loop6 [ 3048.374733] FAULT_INJECTION: forcing a failure. [ 3048.374733] name failslab, interval 1, probability 0, space 0, times 0 [ 3048.377546] CPU: 1 PID: 14165 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3048.379211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3048.381201] Call Trace: [ 3048.381766] dump_stack+0x107/0x167 [ 3048.382547] should_fail.cold+0x5/0xa [ 3048.383389] should_failslab+0x5/0x20 [ 3048.384403] __kmalloc_node_track_caller+0x74/0x3b0 [ 3048.385566] ? alloc_skb_with_frags+0x92/0x570 [ 3048.386699] __alloc_skb+0xb1/0x5b0 [ 3048.387469] alloc_skb_with_frags+0x92/0x570 [ 3048.388401] sock_alloc_send_pskb+0x7af/0x930 [ 3048.389375] ? sk_alloc+0x350/0x350 [ 3048.390144] ? create_object.isra.0+0x3ad/0xa20 [ 3048.391131] ? lock_release+0x680/0x680 [ 3048.391972] ? find_held_lock+0x2c/0x110 [ 3048.392847] __ip_append_data+0x162d/0x3310 [ 3048.393761] ? lock_downgrade+0x6d0/0x6d0 [ 3048.394633] ? do_raw_spin_lock+0x121/0x260 [ 3048.395546] ? ip_frag_init+0x350/0x350 [ 3048.396396] ? __ip_finish_output.part.0+0xb70/0xb70 [ 3048.397472] ? ip_route_output_key_hash+0x19c/0x340 [ 3048.398664] ? ipv4_mtu+0x1ed/0x2c0 [ 3048.399442] ip_make_skb+0x22a/0x2a0 [ 3048.400334] ? ip_frag_init+0x350/0x350 [ 3048.401397] ? ip_flush_pending_frames+0x20/0x20 [ 3048.402557] ? lock_downgrade+0x6d0/0x6d0 [ 3048.403429] ? xfrm_lookup_route+0x65/0x210 [ 3048.404439] udp_sendmsg+0x161b/0x2220 [ 3048.405457] ? ip_frag_init+0x350/0x350 [ 3048.406520] ? udp_setsockopt+0xc0/0xc0 [ 3048.407374] ? sock_has_perm+0x1ea/0x280 [ 3048.408412] ? __import_iovec+0x458/0x590 [ 3048.409292] ? udp_setsockopt+0xc0/0xc0 [ 3048.410239] inet_sendmsg+0x105/0x140 [ 3048.411076] ? inet_send_prepare+0x540/0x540 [ 3048.412003] __sock_sendmsg+0x13c/0x190 [ 3048.412853] ____sys_sendmsg+0x334/0x870 [ 3048.413830] ? sock_write_iter+0x3d0/0x3d0 [ 3048.414929] ? do_recvmmsg+0x6d0/0x6d0 [ 3048.415755] ? find_held_lock+0x2c/0x110 [ 3048.416819] ___sys_sendmsg+0xf3/0x170 [ 3048.417640] ? sendmsg_copy_msghdr+0x160/0x160 [ 3048.418607] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3048.419712] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3048.420658] ? trace_hardirqs_on+0x5b/0x180 [ 3048.421562] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3048.422506] ? finish_task_switch+0x126/0x5d0 [ 3048.423446] ? finish_task_switch+0xef/0x5d0 [ 3048.424364] ? __switch_to+0x572/0xf70 [ 3048.425213] ? __switch_to_asm+0x3a/0x60 [ 3048.426208] ? __switch_to_asm+0x34/0x60 [ 3048.427370] ? __schedule+0x82c/0x1ea0 [ 3048.428215] ? io_schedule_timeout+0x140/0x140 [ 3048.429344] __sys_sendmmsg+0x195/0x470 [ 3048.430189] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3048.431102] ? lock_downgrade+0x6d0/0x6d0 [ 3048.432134] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3048.433166] ? wait_for_completion_io+0x270/0x270 [ 3048.434407] ? rcu_read_lock_any_held+0x75/0xa0 [ 3048.435478] ? vfs_write+0x354/0xb10 [ 3048.436297] ? fput_many+0x2f/0x1a0 [ 3048.437195] ? ksys_write+0x1a9/0x260 [ 3048.438043] ? __ia32_sys_read+0xb0/0xb0 [ 3048.439033] __x64_sys_sendmmsg+0x99/0x100 [ 3048.440192] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3048.441302] do_syscall_64+0x33/0x40 [ 3048.442087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3048.443160] RIP: 0033:0x7fcb10dbfb19 [ 3048.443936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3048.447962] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3048.449575] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3048.451252] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3048.453384] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3048.455278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3048.457375] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:09:42 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3048.474695] blktrace: Concurrent blktraces are not allowed on loop14 12:09:42 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:09:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0xfdffffff00000000, &(0x7f0000000040)=ANY=[]) 12:09:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 74) [ 3048.605592] loop1: detected capacity change from 0 to 512 12:09:42 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:09:42 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x500}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:09:42 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3048.738802] FAULT_INJECTION: forcing a failure. [ 3048.738802] name failslab, interval 1, probability 0, space 0, times 0 [ 3048.741221] CPU: 0 PID: 14184 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3048.742646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3048.744352] Call Trace: [ 3048.744904] dump_stack+0x107/0x167 [ 3048.745643] should_fail.cold+0x5/0xa [ 3048.746419] ? create_object.isra.0+0x3a/0xa20 [ 3048.747352] should_failslab+0x5/0x20 [ 3048.748124] kmem_cache_alloc+0x5b/0x310 [ 3048.748970] create_object.isra.0+0x3a/0xa20 [ 3048.749864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3048.750908] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3048.751939] ? alloc_skb_with_frags+0x92/0x570 [ 3048.752877] __alloc_skb+0xb1/0x5b0 [ 3048.753625] alloc_skb_with_frags+0x92/0x570 [ 3048.754530] sock_alloc_send_pskb+0x7af/0x930 [ 3048.755461] ? sk_alloc+0x350/0x350 [ 3048.756203] ? create_object.isra.0+0x3ad/0xa20 [ 3048.757158] ? lock_release+0x680/0x680 [ 3048.757961] ? find_held_lock+0x2c/0x110 [ 3048.758794] __ip_append_data+0x162d/0x3310 [ 3048.759675] ? lock_downgrade+0x6d0/0x6d0 [ 3048.760510] ? do_raw_spin_lock+0x121/0x260 [ 3048.761411] ? ip_frag_init+0x350/0x350 [ 3048.762240] ? __ip_finish_output.part.0+0xb70/0xb70 [ 3048.762315] blktrace: Concurrent blktraces are not allowed on loop14 [ 3048.763262] ? ip_route_output_key_hash+0x19c/0x340 [ 3048.763279] ? ipv4_mtu+0x1ed/0x2c0 [ 3048.763305] ip_make_skb+0x22a/0x2a0 [ 3048.763326] ? ip_frag_init+0x350/0x350 [ 3048.763348] ? ip_flush_pending_frames+0x20/0x20 [ 3048.763374] ? lock_downgrade+0x6d0/0x6d0 [ 3048.763394] ? xfrm_lookup_route+0x65/0x210 [ 3048.763413] udp_sendmsg+0x161b/0x2220 [ 3048.763442] ? ip_frag_init+0x350/0x350 [ 3048.772383] ? udp_setsockopt+0xc0/0xc0 [ 3048.773444] ? sock_has_perm+0x1ea/0x280 [ 3048.774307] ? __import_iovec+0x458/0x590 [ 3048.775167] ? udp_setsockopt+0xc0/0xc0 [ 3048.775993] inet_sendmsg+0x105/0x140 [ 3048.776787] ? inet_send_prepare+0x540/0x540 [ 3048.777917] __sock_sendmsg+0x13c/0x190 [ 3048.778806] ____sys_sendmsg+0x334/0x870 [ 3048.779849] ? sock_write_iter+0x3d0/0x3d0 [ 3048.780741] ? do_recvmmsg+0x6d0/0x6d0 [ 3048.781760] ? __lock_acquire+0x1657/0x5b00 [ 3048.782881] ___sys_sendmsg+0xf3/0x170 [ 3048.783693] ? sendmsg_copy_msghdr+0x160/0x160 [ 3048.784890] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3048.786279] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3048.787200] ? trace_hardirqs_on+0x5b/0x180 [ 3048.788306] ? lock_acquire+0x197/0x470 [ 3048.789214] ? find_held_lock+0x2c/0x110 [ 3048.790068] ? __might_fault+0xd3/0x180 [ 3048.790894] ? lock_downgrade+0x6d0/0x6d0 [ 3048.791777] __sys_sendmmsg+0x195/0x470 [ 3048.792625] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3048.793524] ? lock_downgrade+0x6d0/0x6d0 [ 3048.794398] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3048.795401] ? wait_for_completion_io+0x270/0x270 [ 3048.796398] ? rcu_read_lock_any_held+0x75/0xa0 [ 3048.797376] ? vfs_write+0x354/0xb10 [ 3048.798157] ? fput_many+0x2f/0x1a0 [ 3048.798920] ? ksys_write+0x1a9/0x260 [ 3048.799735] ? __ia32_sys_read+0xb0/0xb0 [ 3048.800608] __x64_sys_sendmmsg+0x99/0x100 [ 3048.801484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3048.802557] do_syscall_64+0x33/0x40 [ 3048.803324] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3048.804386] RIP: 0033:0x7fcb10dbfb19 [ 3048.805169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3048.808828] blktrace: Concurrent blktraces are not allowed on loop14 [ 3048.808946] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3048.811903] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3048.813375] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3048.814845] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3048.816315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3048.817797] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:09:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 75) 12:09:57 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x600}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:09:57 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:09:57 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:09:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0xff0f000000000000, &(0x7f0000000040)=ANY=[]) 12:09:57 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x4000, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:09:57 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x300000000000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) [ 3063.009456] blktrace: Concurrent blktraces are not allowed on loop14 12:09:57 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 3063.018403] blktrace: Concurrent blktraces are not allowed on loop4 [ 3063.043800] loop1: detected capacity change from 0 to 512 [ 3063.082554] blktrace: Concurrent blktraces are not allowed on loop6 [ 3063.083336] blktrace: Concurrent blktraces are not allowed on loop14 [ 3063.100953] FAULT_INJECTION: forcing a failure. [ 3063.100953] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.103630] CPU: 1 PID: 14211 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3063.105209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3063.105833] loop1: detected capacity change from 0 to 512 [ 3063.107079] Call Trace: [ 3063.107107] dump_stack+0x107/0x167 [ 3063.107135] should_fail.cold+0x5/0xa [ 3063.110131] ? skb_clone+0x14f/0x3d0 [ 3063.111004] should_failslab+0x5/0x20 [ 3063.111865] kmem_cache_alloc+0x5b/0x310 [ 3063.112799] skb_clone+0x14f/0x3d0 [ 3063.113609] ip_mc_output+0x5e8/0xd50 [ 3063.114473] ? ip_build_and_send_pkt+0x10d0/0x10d0 [ 3063.115575] ip_send_skb+0x339/0x570 [ 3063.116413] udp_send_skb+0x6ec/0x1250 [ 3063.117311] udp_sendmsg+0x1659/0x2220 [ 3063.118194] ? ip_frag_init+0x350/0x350 [ 3063.119095] ? udp_setsockopt+0xc0/0xc0 [ 3063.120005] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3063.121205] ? asm_sysvec_call_function_single+0x12/0x20 [ 3063.122436] ? sock_has_perm+0x1ea/0x280 [ 3063.123364] ? __sanitizer_cov_trace_pc+0x52/0x60 [ 3063.124467] ? __import_iovec+0x458/0x590 [ 3063.125414] ? udp_setsockopt+0xc0/0xc0 [ 3063.126315] inet_sendmsg+0x105/0x140 [ 3063.127187] ? inet_send_prepare+0x540/0x540 [ 3063.128174] __sock_sendmsg+0x13c/0x190 [ 3063.129086] ____sys_sendmsg+0x334/0x870 [ 3063.130009] ? sock_write_iter+0x3d0/0x3d0 [ 3063.130970] ? do_recvmmsg+0x6d0/0x6d0 [ 3063.131858] ? __lock_acquire+0x1657/0x5b00 [ 3063.132860] ___sys_sendmsg+0xf3/0x170 [ 3063.133749] ? sendmsg_copy_msghdr+0x160/0x160 [ 3063.134786] ? __fget_files+0x2cf/0x520 [ 3063.135693] ? lock_acquire+0x197/0x470 [ 3063.136604] ? find_held_lock+0x2c/0x110 [ 3063.137535] ? __might_fault+0xd3/0x180 [ 3063.138431] ? lock_downgrade+0x6d0/0x6d0 [ 3063.139392] __sys_sendmmsg+0x195/0x470 [ 3063.140297] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3063.141288] ? lock_downgrade+0x6d0/0x6d0 [ 3063.142239] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3063.143323] ? wait_for_completion_io+0x270/0x270 [ 3063.144412] ? rcu_read_lock_any_held+0x75/0xa0 [ 3063.145478] ? vfs_write+0x354/0xb10 [ 3063.146319] ? fput_many+0x2f/0x1a0 [ 3063.147139] ? ksys_write+0x1a9/0x260 [ 3063.148002] ? __ia32_sys_read+0xb0/0xb0 [ 3063.148930] __x64_sys_sendmmsg+0x99/0x100 [ 3063.149884] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3063.151051] do_syscall_64+0x33/0x40 [ 3063.151898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3063.153066] RIP: 0033:0x7fcb10dbfb19 [ 3063.153906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.158719] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3063.160947] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3063.162749] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3063.164392] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3063.166044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3063.167786] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:09:57 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x700}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:09:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0xffffff7f00000000, &(0x7f0000000040)=ANY=[]) 12:09:57 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3063.218663] blktrace: Concurrent blktraces are not allowed on loop14 [ 3063.236777] blktrace: Concurrent blktraces are not allowed on loop4 [ 3063.270398] blktrace: Concurrent blktraces are not allowed on loop14 12:09:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 76) 12:09:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0xffffffff00000000, &(0x7f0000000040)=ANY=[]) 12:09:57 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x2000000000000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:09:57 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:09:57 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3063.383896] blktrace: Concurrent blktraces are not allowed on loop12 [ 3063.400372] blktrace: Concurrent blktraces are not allowed on loop4 12:09:57 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:09:57 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x1125}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3063.425575] blktrace: Concurrent blktraces are not allowed on loop14 12:09:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0xffffffffffffffff, &(0x7f0000000040)=ANY=[]) [ 3063.442849] blktrace: Concurrent blktraces are not allowed on loop14 12:09:57 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3063.480067] FAULT_INJECTION: forcing a failure. [ 3063.480067] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.481404] CPU: 0 PID: 14247 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3063.482178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3063.483110] Call Trace: [ 3063.483409] dump_stack+0x107/0x167 [ 3063.483878] should_fail.cold+0x5/0xa [ 3063.484354] ? skb_clone+0x14f/0x3d0 [ 3063.484780] should_failslab+0x5/0x20 [ 3063.485208] kmem_cache_alloc+0x5b/0x310 [ 3063.485667] skb_clone+0x14f/0x3d0 [ 3063.486067] ip_mc_output+0x5e8/0xd50 [ 3063.486496] ? ip_build_and_send_pkt+0x10d0/0x10d0 [ 3063.487044] ip_send_skb+0x339/0x570 [ 3063.487463] udp_send_skb+0x6ec/0x1250 [ 3063.487910] udp_sendmsg+0x1659/0x2220 [ 3063.488347] ? ip_frag_init+0x350/0x350 [ 3063.488804] ? udp_setsockopt+0xc0/0xc0 [ 3063.489258] ? sock_has_perm+0x1ea/0x280 [ 3063.489721] ? __import_iovec+0x458/0x590 [ 3063.490184] ? udp_setsockopt+0xc0/0xc0 [ 3063.490629] inet_sendmsg+0x105/0x140 [ 3063.491056] ? inet_send_prepare+0x540/0x540 [ 3063.491543] __sock_sendmsg+0x13c/0x190 [ 3063.491985] ____sys_sendmsg+0x334/0x870 [ 3063.492450] ? sock_write_iter+0x3d0/0x3d0 [ 3063.492923] ? do_recvmmsg+0x6d0/0x6d0 [ 3063.493360] ? find_held_lock+0x2c/0x110 [ 3063.493818] ___sys_sendmsg+0xf3/0x170 [ 3063.494251] ? sendmsg_copy_msghdr+0x160/0x160 [ 3063.494761] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3063.495344] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3063.495839] ? trace_hardirqs_on+0x5b/0x180 [ 3063.496316] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3063.496817] ? finish_task_switch+0x126/0x5d0 [ 3063.497312] ? finish_task_switch+0xef/0x5d0 [ 3063.497797] ? __switch_to+0x572/0xf70 [ 3063.498231] ? __switch_to_asm+0x3a/0x60 [ 3063.498681] ? __switch_to_asm+0x34/0x60 [ 3063.499138] ? __schedule+0x82c/0x1ea0 [ 3063.499577] ? io_schedule_timeout+0x140/0x140 [ 3063.500091] __sys_sendmmsg+0x195/0x470 [ 3063.500539] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3063.501025] ? lock_downgrade+0x6d0/0x6d0 [ 3063.501494] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3063.502031] ? wait_for_completion_io+0x270/0x270 [ 3063.502570] ? rcu_read_lock_any_held+0x75/0xa0 [ 3063.503087] ? vfs_write+0x354/0xb10 [ 3063.503503] ? fput_many+0x2f/0x1a0 [ 3063.503912] ? ksys_write+0x1a9/0x260 [ 3063.504339] ? __ia32_sys_read+0xb0/0xb0 [ 3063.504802] __x64_sys_sendmmsg+0x99/0x100 [ 3063.505273] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3063.505845] do_syscall_64+0x33/0x40 [ 3063.506258] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3063.506830] RIP: 0033:0x7fcb10dbfb19 [ 3063.507242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.509287] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3063.510131] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3063.510921] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3063.511712] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3063.512499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3063.513297] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3063.517380] loop1: detected capacity change from 0 to 512 [ 3063.541075] blktrace: Concurrent blktraces are not allowed on loop4 [ 3077.922570] blktrace: Concurrent blktraces are not allowed on loop4 12:10:12 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 77) 12:10:12 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:10:12 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:10:12 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x4000000000000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:10:12 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x2511}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:10:12 executing program 1: r0 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x81}}, './file1\x00'}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x1) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) unlinkat(r5, &(0x7f0000000040)='./file1\x00', 0x0) openat(r5, &(0x7f0000000080)='./file0\x00', 0x0, 0x5) 12:10:12 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x910b, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:10:12 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:10:12 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3077.959699] loop1: detected capacity change from 0 to 512 [ 3077.963831] blktrace: Concurrent blktraces are not allowed on loop14 [ 3077.964398] blktrace: Concurrent blktraces are not allowed on loop6 [ 3077.978198] FAULT_INJECTION: forcing a failure. [ 3077.978198] name failslab, interval 1, probability 0, space 0, times 0 [ 3077.979779] CPU: 0 PID: 14275 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3077.980721] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3077.981849] Call Trace: [ 3077.982217] dump_stack+0x107/0x167 [ 3077.982715] should_fail.cold+0x5/0xa [ 3077.983235] ? dst_alloc+0x9e/0x5d0 [ 3077.983739] should_failslab+0x5/0x20 [ 3077.984261] kmem_cache_alloc+0x5b/0x310 [ 3077.984823] dst_alloc+0x9e/0x5d0 [ 3077.985306] rt_dst_clone+0x59/0x870 [ 3077.985815] ip_mc_finish_output+0x95/0x280 [ 3077.986406] ip_mc_output+0x962/0xd50 [ 3077.986928] ? ip_build_and_send_pkt+0x10d0/0x10d0 [ 3077.987617] ip_send_skb+0x339/0x570 [ 3077.988122] udp_send_skb+0x6ec/0x1250 [ 3077.988657] udp_sendmsg+0x1659/0x2220 [ 3077.989194] ? ip_frag_init+0x350/0x350 [ 3077.989735] ? udp_setsockopt+0xc0/0xc0 [ 3077.990299] ? sock_has_perm+0x1ea/0x280 [ 3077.990863] ? __import_iovec+0x458/0x590 [ 3077.991428] ? udp_setsockopt+0xc0/0xc0 [ 3077.991971] inet_sendmsg+0x105/0x140 [ 3077.992490] ? inet_send_prepare+0x540/0x540 [ 3077.993119] __sock_sendmsg+0x13c/0x190 [ 3077.993660] ____sys_sendmsg+0x334/0x870 [ 3077.994212] ? sock_write_iter+0x3d0/0x3d0 [ 3077.994786] ? do_recvmmsg+0x6d0/0x6d0 [ 3077.995319] ? __lock_acquire+0x1657/0x5b00 [ 3077.995914] ___sys_sendmsg+0xf3/0x170 [ 3077.996446] ? sendmsg_copy_msghdr+0x160/0x160 [ 3077.997083] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3077.997794] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3077.998416] ? trace_hardirqs_on+0x5b/0x180 [ 3077.999001] ? lock_acquire+0x197/0x470 [ 3077.999543] ? find_held_lock+0x2c/0x110 [ 3078.000101] ? __might_fault+0xd3/0x180 [ 3078.000636] ? lock_downgrade+0x6d0/0x6d0 [ 3078.001220] __sys_sendmmsg+0x195/0x470 [ 3078.001768] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3078.002357] ? lock_downgrade+0x6d0/0x6d0 [ 3078.002922] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3078.003577] ? wait_for_completion_io+0x270/0x270 [ 3078.004232] ? rcu_read_lock_any_held+0x75/0xa0 [ 3078.004948] ? vfs_write+0x354/0xb10 [ 3078.005572] ? fput_many+0x2f/0x1a0 [ 3078.006208] ? ksys_write+0x1a9/0x260 [ 3078.006725] ? __ia32_sys_read+0xb0/0xb0 [ 3078.007287] __x64_sys_sendmmsg+0x99/0x100 [ 3078.007862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3078.008061] EXT4-fs (loop1): unable to read superblock [ 3078.008554] do_syscall_64+0x33/0x40 [ 3078.008568] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3078.008589] RIP: 0033:0x7fcb10dbfb19 [ 3078.011552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.014049] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3078.015090] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3078.016046] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3078.017016] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.017967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3078.018926] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3078.101423] blktrace: Concurrent blktraces are not allowed on loop4 12:10:12 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 78) 12:10:12 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0xe0ffff}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:10:12 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x9000000000000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:10:12 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:10:12 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:10:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000140)=0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x114, 0x0, 0x2, 0x70bd2c, 0x25dfdbff}, 0x114}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) [ 3078.239705] blktrace: Concurrent blktraces are not allowed on loop4 [ 3078.242164] blktrace: Concurrent blktraces are not allowed on loop14 [ 3078.314334] blktrace: Concurrent blktraces are not allowed on loop14 12:10:12 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3078.366822] loop1: detected capacity change from 0 to 512 [ 3078.379201] FAULT_INJECTION: forcing a failure. [ 3078.379201] name failslab, interval 1, probability 0, space 0, times 0 [ 3078.380448] CPU: 0 PID: 14304 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3078.381216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3078.382125] Call Trace: [ 3078.382418] dump_stack+0x107/0x167 [ 3078.382820] should_fail.cold+0x5/0xa [ 3078.383240] ? create_object.isra.0+0x3a/0xa20 [ 3078.383742] should_failslab+0x5/0x20 [ 3078.384166] kmem_cache_alloc+0x5b/0x310 [ 3078.384614] create_object.isra.0+0x3a/0xa20 [ 3078.385099] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3078.385654] kmem_cache_alloc+0x159/0x310 [ 3078.386113] dst_alloc+0x9e/0x5d0 [ 3078.386495] rt_dst_clone+0x59/0x870 [ 3078.386907] ip_mc_finish_output+0x95/0x280 [ 3078.387382] ip_mc_output+0x962/0xd50 [ 3078.387805] ? ip_build_and_send_pkt+0x10d0/0x10d0 [ 3078.388345] ip_send_skb+0x339/0x570 [ 3078.388754] udp_send_skb+0x6ec/0x1250 [ 3078.389191] udp_sendmsg+0x1659/0x2220 [ 3078.389617] ? ip_frag_init+0x350/0x350 [ 3078.390057] ? udp_setsockopt+0xc0/0xc0 [ 3078.390503] ? sock_has_perm+0x1ea/0x280 [ 3078.390959] ? __import_iovec+0x458/0x590 [ 3078.391413] ? udp_setsockopt+0xc0/0xc0 [ 3078.391850] inet_sendmsg+0x105/0x140 [ 3078.392267] ? inet_send_prepare+0x540/0x540 [ 3078.392747] __sock_sendmsg+0x13c/0x190 [ 3078.393190] ____sys_sendmsg+0x334/0x870 [ 3078.393636] ? sock_write_iter+0x3d0/0x3d0 [ 3078.394101] ? do_recvmmsg+0x6d0/0x6d0 [ 3078.394529] ? __lock_acquire+0x1657/0x5b00 [ 3078.395009] ___sys_sendmsg+0xf3/0x170 [ 3078.395437] ? sendmsg_copy_msghdr+0x160/0x160 [ 3078.395942] ? __fget_files+0x2cf/0x520 [ 3078.396380] ? lock_acquire+0x197/0x470 [ 3078.396820] ? find_held_lock+0x2c/0x110 [ 3078.397267] ? __might_fault+0xd3/0x180 [ 3078.397703] ? lock_downgrade+0x6d0/0x6d0 [ 3078.398164] __sys_sendmmsg+0x195/0x470 [ 3078.398604] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3078.399076] ? lock_downgrade+0x6d0/0x6d0 [ 3078.399538] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3078.400066] ? wait_for_completion_io+0x270/0x270 [ 3078.400596] ? rcu_read_lock_any_held+0x75/0xa0 [ 3078.401108] ? vfs_write+0x354/0xb10 [ 3078.401518] ? fput_many+0x2f/0x1a0 [ 3078.401917] ? ksys_write+0x1a9/0x260 [ 3078.402336] ? __ia32_sys_read+0xb0/0xb0 [ 3078.402784] __x64_sys_sendmmsg+0x99/0x100 [ 3078.403249] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3078.403814] do_syscall_64+0x33/0x40 [ 3078.404224] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3078.404784] RIP: 0033:0x7fcb10dbfb19 [ 3078.405197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.407210] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3078.408042] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3078.408824] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3078.409605] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.410385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3078.411166] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3078.421506] blktrace: Concurrent blktraces are not allowed on loop4 [ 3078.431179] EXT4-fs (loop1): unable to read superblock [ 3078.545833] loop1: detected capacity change from 0 to 512 [ 3078.551306] EXT4-fs (loop1): unable to read superblock 12:10:25 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x1000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:10:25 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xba00, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:10:25 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0xfdfdffff00000000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:10:25 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:10:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 79) 12:10:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1f22}], 0x14810, &(0x7f0000000040)=ANY=[]) 12:10:25 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:10:25 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 3091.626829] blktrace: Concurrent blktraces are not allowed on loop4 [ 3091.639777] blktrace: Concurrent blktraces are not allowed on loop6 [ 3091.643671] loop1: detected capacity change from 0 to 15872 [ 3091.650685] blktrace: Concurrent blktraces are not allowed on loop14 12:10:25 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:10:25 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3091.704446] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 3091.727840] FAULT_INJECTION: forcing a failure. [ 3091.727840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3091.730437] CPU: 0 PID: 14334 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3091.731940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3091.733762] Call Trace: [ 3091.734340] dump_stack+0x107/0x167 [ 3091.735132] should_fail.cold+0x5/0xa [ 3091.735967] _copy_from_user+0x2e/0x1b0 [ 3091.736841] __copy_msghdr_from_user+0x91/0x4b0 [ 3091.737869] ? __ia32_sys_shutdown+0x80/0x80 [ 3091.738826] ? udp_setsockopt+0xc0/0xc0 [ 3091.739694] ? inet_sendmsg+0xbd/0x140 [ 3091.740540] ? inet_send_prepare+0x540/0x540 [ 3091.741506] ? __sock_sendmsg+0x55/0x190 [ 3091.742397] sendmsg_copy_msghdr+0xa1/0x160 [ 3091.743331] ? do_recvmmsg+0x6d0/0x6d0 [ 3091.744178] ? __lock_acquire+0x1657/0x5b00 [ 3091.745242] ___sys_sendmsg+0xc6/0x170 [ 3091.746107] ? sendmsg_copy_msghdr+0x160/0x160 [ 3091.747110] ? __fget_files+0x2cf/0x520 [ 3091.747978] ? lock_acquire+0x197/0x470 [ 3091.748842] ? find_held_lock+0x2c/0x110 [ 3091.749745] ? __might_fault+0xd3/0x180 [ 3091.750609] ? lock_downgrade+0x6d0/0x6d0 [ 3091.751528] __sys_sendmmsg+0x195/0x470 [ 3091.752399] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3091.753343] ? lock_downgrade+0x6d0/0x6d0 [ 3091.754256] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3091.755307] ? wait_for_completion_io+0x270/0x270 [ 3091.756354] ? rcu_read_lock_any_held+0x75/0xa0 [ 3091.757374] ? vfs_write+0x354/0xb10 [ 3091.758181] ? fput_many+0x2f/0x1a0 [ 3091.758974] ? ksys_write+0x1a9/0x260 [ 3091.759804] ? __ia32_sys_read+0xb0/0xb0 [ 3091.760693] __x64_sys_sendmmsg+0x99/0x100 [ 3091.761621] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3091.762740] do_syscall_64+0x33/0x40 [ 3091.763548] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3091.764659] RIP: 0033:0x7fcb10dbfb19 [ 3091.765477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3091.769482] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3091.771136] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3091.772691] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3091.774249] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3091.775802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3091.777367] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3091.851845] blktrace: Concurrent blktraces are not allowed on loop14 [ 3091.900981] blktrace: Concurrent blktraces are not allowed on loop4 12:10:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/74, 0x4a, 0x0) 12:10:26 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:10:26 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x2000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:10:26 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3092.028526] blktrace: Concurrent blktraces are not allowed on loop14 [ 3092.029316] blktrace: Concurrent blktraces are not allowed on loop4 12:10:26 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 3092.084011] blktrace: Concurrent blktraces are not allowed on loop14 12:10:26 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:10:26 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3092.166933] blktrace: Concurrent blktraces are not allowed on loop4 12:10:40 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x162210, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:10:40 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x3000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:10:40 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x4, 0x40000) r1 = creat(&(0x7f0000000340)='./file0\x00', 0xb0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = creat(&(0x7f0000000340)='./file0\x00', 0xb0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000002c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8810c8}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="a9d91a01fff0d9", @ANYRES16=r4, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0c009900070000001200000018007a8008000400090000000c0003007a3ba5b4a9860fff34007a80140002007dd4874752c76a3c2775f44d33f86af41c0002009f268d8a5fb32a2f55dcad7db0e3dd6bcfa5672e6d2feac7"], 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x50) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r4, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x34}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7f}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="52da7d2fd1d6"}]}, 0x48}}, 0x14) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000c8}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="a9d91a01fff0d9", @ANYRES16=r2, @ANYBLOB="000c25bd7000ffdbdf5cb1f994c985fbc319", @ANYRES32=0x0, @ANYBLOB="0c009900070000001200000018007a8008000400090000000c0003007a3ba5b4a9860fff34007a80140002007dd4874752c76a3c2775f44d33f86af41c0002009f268d8a5fb32a2f55dcad7db0e3dd6bcfa5672e6d2feac7"], 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x50) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xb6dc, 0x3b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000015}, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000c8}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="a9d91a01fff0d9", @ANYRES16=r6, @ANYBLOB="000c25bd7000ffdbdf5cb1f994c985fbc319", @ANYRES32=0x0, @ANYBLOB="0c009900070000001200000018007a8008000400090000000c0003007a3ba5b4a9860fff34007a80140002007dd4874752c76a3c2775f44d33f86af41c0002009f268d8a5fb32a2f55dcad7db0e3dd6bcfa5672e6d2feac7"], 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1bf8c10fc63f67e5"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xa4, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2fb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7fffffff}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x81}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x136}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7ff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}]]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xe8, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff00000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4179}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffe1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5bfb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xfff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0xe8}}, 0x400c881) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) 12:10:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 80) 12:10:40 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3106.025086] blktrace: Concurrent blktraces are not allowed on loop6 [ 3106.025674] blktrace: Concurrent blktraces are not allowed on loop14 [ 3106.029024] FAULT_INJECTION: forcing a failure. [ 3106.029024] name failslab, interval 1, probability 0, space 0, times 0 [ 3106.030502] CPU: 0 PID: 14375 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3106.031396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3106.032449] Call Trace: [ 3106.032793] dump_stack+0x107/0x167 [ 3106.033267] should_fail.cold+0x5/0xa [ 3106.033756] ? dst_alloc+0x9e/0x5d0 [ 3106.034223] should_failslab+0x5/0x20 [ 3106.034709] kmem_cache_alloc+0x5b/0x310 [ 3106.035232] dst_alloc+0x9e/0x5d0 [ 3106.035675] ? trace_hardirqs_on+0x5b/0x180 [ 3106.036229] rt_dst_alloc+0x73/0x440 [ 3106.036703] ip_route_output_key_hash_rcu+0x98d/0x25b0 [ 3106.037388] ip_route_output_key_hash+0x185/0x340 [ 3106.038007] ? ip_route_output_key_hash_rcu+0x25b0/0x25b0 [ 3106.038705] ? lock_downgrade+0x6d0/0x6d0 [ 3106.039241] ip_route_output_flow+0x23/0x150 [ 3106.039805] udp_sendmsg+0x190d/0x2220 [ 3106.040307] ? ip_frag_init+0x350/0x350 [ 3106.040817] ? udp_setsockopt+0xc0/0xc0 [ 3106.041353] ? sock_has_perm+0x1ea/0x280 [ 3106.041869] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3106.042535] ? __import_iovec+0x458/0x590 [ 3106.043066] ? udp_setsockopt+0xc0/0xc0 [ 3106.043569] inet_sendmsg+0x105/0x140 [ 3106.044057] ? inet_send_prepare+0x540/0x540 [ 3106.044616] __sock_sendmsg+0x13c/0x190 [ 3106.045141] ____sys_sendmsg+0x334/0x870 [ 3106.045657] ? sock_write_iter+0x3d0/0x3d0 [ 3106.046204] ? do_recvmmsg+0x6d0/0x6d0 [ 3106.046706] ? __lock_acquire+0x1657/0x5b00 [ 3106.047457] ___sys_sendmsg+0xf3/0x170 [ 3106.047958] ? sendmsg_copy_msghdr+0x160/0x160 [ 3106.048537] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3106.049219] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3106.049781] ? trace_hardirqs_on+0x5b/0x180 [ 3106.050338] ? lock_acquire+0x197/0x470 [ 3106.050838] ? find_held_lock+0x2c/0x110 [ 3106.051365] ? __might_fault+0xd3/0x180 [ 3106.051875] ? lock_downgrade+0x6d0/0x6d0 [ 3106.052418] __sys_sendmmsg+0x195/0x470 [ 3106.052935] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3106.053502] ? lock_downgrade+0x6d0/0x6d0 [ 3106.054039] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3106.054659] ? wait_for_completion_io+0x270/0x270 [ 3106.054943] blktrace: Concurrent blktraces are not allowed on loop4 [ 3106.055272] ? rcu_read_lock_any_held+0x75/0xa0 [ 3106.055284] ? vfs_write+0x354/0xb10 [ 3106.055302] ? fput_many+0x2f/0x1a0 [ 3106.058163] ? ksys_write+0x1a9/0x260 [ 3106.058643] ? __ia32_sys_read+0xb0/0xb0 [ 3106.059162] __x64_sys_sendmmsg+0x99/0x100 [ 3106.059700] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3106.060349] do_syscall_64+0x33/0x40 [ 3106.060817] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3106.061467] RIP: 0033:0x7fcb10dbfb19 [ 3106.061936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3106.064244] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3106.065208] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3106.066108] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3106.067004] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3106.067897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3106.068978] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:10:40 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:10:40 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_NOP={0x0, 0x3}, 0x9) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:10:40 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 3106.128753] loop1: detected capacity change from 0 to 512 12:10:40 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3106.177254] blktrace: Concurrent blktraces are not allowed on loop4 [ 3106.179785] EXT4-fs (loop1): unable to read superblock 12:10:40 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:10:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 81) 12:10:40 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:10:40 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x4000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3106.320399] blktrace: Concurrent blktraces are not allowed on loop4 [ 3106.327106] FAULT_INJECTION: forcing a failure. [ 3106.327106] name failslab, interval 1, probability 0, space 0, times 0 [ 3106.328447] CPU: 0 PID: 14405 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3106.329233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3106.330176] Call Trace: [ 3106.330480] dump_stack+0x107/0x167 [ 3106.330894] should_fail.cold+0x5/0xa [ 3106.331327] ? ___slab_alloc+0x155/0x700 [ 3106.331790] ? create_object.isra.0+0x3a/0xa20 [ 3106.332313] should_failslab+0x5/0x20 [ 3106.332743] kmem_cache_alloc+0x5b/0x310 [ 3106.333213] ? lock_acquire+0x197/0x470 [ 3106.333669] create_object.isra.0+0x3a/0xa20 [ 3106.334171] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3106.334745] kmem_cache_alloc+0x159/0x310 [ 3106.335223] dst_alloc+0x9e/0x5d0 [ 3106.335616] ? trace_hardirqs_on+0x5b/0x180 [ 3106.336108] rt_dst_alloc+0x73/0x440 [ 3106.336541] ip_route_output_key_hash_rcu+0x98d/0x25b0 [ 3106.337154] ip_route_output_key_hash+0x185/0x340 [ 3106.337702] ? ip_route_output_key_hash_rcu+0x25b0/0x25b0 [ 3106.338330] ? lock_downgrade+0x6d0/0x6d0 [ 3106.338806] ip_route_output_flow+0x23/0x150 [ 3106.339304] udp_sendmsg+0x190d/0x2220 [ 3106.339753] ? ip_frag_init+0x350/0x350 [ 3106.340209] ? udp_setsockopt+0xc0/0xc0 [ 3106.340676] ? sock_has_perm+0x1ea/0x280 [ 3106.341147] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3106.341743] ? __import_iovec+0x458/0x590 [ 3106.342214] ? udp_setsockopt+0xc0/0xc0 [ 3106.342673] inet_sendmsg+0x105/0x140 [ 3106.343105] ? inet_send_prepare+0x540/0x540 [ 3106.343612] __sock_sendmsg+0x13c/0x190 [ 3106.344078] ____sys_sendmsg+0x334/0x870 [ 3106.344554] ? sock_write_iter+0x3d0/0x3d0 [ 3106.345034] ? do_recvmmsg+0x6d0/0x6d0 [ 3106.345492] ? __lock_acquire+0x1657/0x5b00 [ 3106.345991] ___sys_sendmsg+0xf3/0x170 [ 3106.346438] ? sendmsg_copy_msghdr+0x160/0x160 [ 3106.346958] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3106.347555] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3106.348060] ? trace_hardirqs_on+0x5b/0x180 [ 3106.348554] ? lock_acquire+0x197/0x470 [ 3106.349004] ? find_held_lock+0x2c/0x110 [ 3106.349478] ? __might_fault+0xd3/0x180 [ 3106.349933] ? lock_downgrade+0x6d0/0x6d0 [ 3106.350414] __sys_sendmmsg+0x195/0x470 [ 3106.350871] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3106.351362] ? lock_downgrade+0x6d0/0x6d0 [ 3106.351840] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3106.352391] ? wait_for_completion_io+0x270/0x270 [ 3106.352946] ? rcu_read_lock_any_held+0x75/0xa0 [ 3106.353476] ? vfs_write+0x354/0xb10 [ 3106.353897] ? fput_many+0x2f/0x1a0 [ 3106.354314] ? ksys_write+0x1a9/0x260 [ 3106.354746] ? __ia32_sys_read+0xb0/0xb0 [ 3106.355208] __x64_sys_sendmmsg+0x99/0x100 [ 3106.355684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3106.356264] do_syscall_64+0x33/0x40 [ 3106.356683] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3106.357268] RIP: 0033:0x7fcb10dbfb19 [ 3106.357688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3106.359752] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3106.360625] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3106.361432] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3106.362236] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3106.363036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3106.363836] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:10:40 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3106.389866] blktrace: Concurrent blktraces are not allowed on loop14 12:10:40 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3106.430310] blktrace: Concurrent blktraces are not allowed on loop4 12:10:40 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 3106.436098] blktrace: Concurrent blktraces are not allowed on loop14 [ 3108.715653] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3108.717150] CPU: 0 PID: 288 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 3108.717922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3108.718865] Call Trace: [ 3108.719171] dump_stack+0x107/0x167 [ 3108.719590] dump_header+0x107/0x689 [ 3108.720018] oom_kill_process.cold+0x10/0x15 [ 3108.720522] out_of_memory+0x1149/0x1440 [ 3108.720990] ? oom_killer_disable+0x280/0x280 [ 3108.721507] ? mutex_trylock+0x237/0x2b0 [ 3108.721974] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 3108.722642] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 3108.723313] ? lock_acquire+0x177/0x470 [ 3108.723764] ? warn_alloc+0x190/0x190 [ 3108.724208] __alloc_pages_nodemask+0x51d/0x600 [ 3108.724731] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3108.725433] ? find_get_entry+0x2c8/0x740 [ 3108.725908] alloc_pages_current+0x187/0x280 [ 3108.726406] __page_cache_alloc+0x2d2/0x360 [ 3108.726899] pagecache_get_page+0x2c7/0xc80 [ 3108.727401] filemap_fault+0x177d/0x2210 [ 3108.727869] ? read_cache_page_gfp+0x30/0x30 [ 3108.728373] ? replace_page_cache_page+0x1200/0x1200 [ 3108.728953] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3108.729566] ext4_filemap_fault+0x87/0xc0 [ 3108.730040] __do_fault+0x113/0x410 [ 3108.730463] handle_mm_fault+0x1e53/0x3500 [ 3108.730955] ? __pmd_alloc+0x630/0x630 [ 3108.731408] ? vmacache_find+0x55/0x2a0 [ 3108.731872] do_user_addr_fault+0x56e/0xc60 [ 3108.732371] exc_page_fault+0xa2/0x1a0 [ 3108.732818] ? asm_exc_page_fault+0x8/0x30 [ 3108.733308] asm_exc_page_fault+0x1e/0x30 [ 3108.733779] RIP: 0033:0x7fcde87038e1 [ 3108.734213] Code: Unable to access opcode bytes at RIP 0x7fcde87038b7. [ 3108.734958] RSP: 002b:00007ffeb500b230 EFLAGS: 00010293 [ 3108.735568] RAX: 0000000000000000 RBX: 00000000000004b8 RCX: 00007fcde87038e1 [ 3108.736380] RDX: 00007ffeb500b270 RSI: 0000000000000000 RDI: 0000000000000000 [ 3108.737204] RBP: 00007ffeb500b2fc R08: 0000000000000000 R09: 00007ffeb5116080 [ 3108.738022] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 3108.738836] R13: 00000000002f6527 R14: 000000000000000c R15: 00007ffeb500b360 [ 3108.739737] Mem-Info: [ 3108.740038] active_anon:693 inactive_anon:60351 isolated_anon:0 [ 3108.740038] active_file:17 inactive_file:18 isolated_file:0 [ 3108.740038] unevictable:0 dirty:0 writeback:0 [ 3108.740038] slab_reclaimable:9417 slab_unreclaimable:60758 [ 3108.740038] mapped:69656 shmem:120 pagetables:1004 bounce:0 [ 3108.740038] free:2873 free_pcp:20 free_cma:0 [ 3108.743605] Node 0 active_anon:2772kB inactive_anon:241404kB active_file:68kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278624kB dirty:0kB writeback:0kB shmem:480kB writeback_tmp:0kB kernel_stack:3648kB all_unreclaimable? yes [ 3108.746239] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3108.749507] lowmem_reserve[]: 0 1616 1616 1616 [ 3108.750051] Node 0 DMA32 free:7052kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:2772kB inactive_anon:241404kB active_file:112kB inactive_file:64kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:4016kB bounce:0kB free_pcp:596kB local_pcp:0kB free_cma:0kB [ 3108.753268] lowmem_reserve[]: 0 0 0 0 [ 3108.753724] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3108.755529] Node 0 DMA32: 339*4kB (UME) 165*8kB (UME) 68*16kB (UME) 115*32kB (UM) 15*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8404kB [ 3108.757203] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3108.758259] 216 total pagecache pages [ 3108.758740] 0 pages in swap cache [ 3108.759144] Swap cache stats: add 0, delete 0, find 0/0 [ 3108.759840] Free swap = 0kB [ 3108.760281] Total swap = 0kB [ 3108.760624] 524158 pages RAM [ 3108.760966] 0 pages HighMem/MovableOnly [ 3108.761534] 105068 pages reserved [ 3108.761992] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=288,uid=0 [ 3108.764099] Out of memory (oom_kill_allocating_task): Killed process 288 (syz-executor.3) total-vm:93280kB, anon-rss:384kB, file-rss:34324kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:0 [ 3109.507583] syz-executor.6 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3109.508780] CPU: 0 PID: 286 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 3109.509549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3109.510497] Call Trace: [ 3109.510802] dump_stack+0x107/0x167 [ 3109.511217] dump_header+0x107/0x689 [ 3109.511652] oom_kill_process.cold+0x10/0x15 [ 3109.512155] out_of_memory+0x1149/0x1440 [ 3109.512622] ? oom_killer_disable+0x280/0x280 [ 3109.513144] ? mutex_trylock+0x237/0x2b0 [ 3109.513607] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 3109.514277] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 3109.514945] ? lock_acquire+0x177/0x470 [ 3109.515398] ? warn_alloc+0x190/0x190 [ 3109.515839] __alloc_pages_nodemask+0x51d/0x600 [ 3109.516369] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3109.517050] ? find_get_entry+0x2c8/0x740 [ 3109.517544] alloc_pages_current+0x187/0x280 [ 3109.518044] __page_cache_alloc+0x2d2/0x360 [ 3109.518542] pagecache_get_page+0x2c7/0xc80 [ 3109.519034] filemap_fault+0x177d/0x2210 [ 3109.519504] ? read_cache_page_gfp+0x30/0x30 [ 3109.520014] ? handle_mm_fault+0x28b1/0x3500 [ 3109.520516] ? lock_downgrade+0x6d0/0x6d0 [ 3109.520990] ext4_filemap_fault+0x87/0xc0 [ 3109.521469] __do_fault+0x113/0x410 [ 3109.521888] handle_mm_fault+0x1e53/0x3500 [ 3109.522376] ? __pmd_alloc+0x630/0x630 [ 3109.522823] ? vmacache_find+0x55/0x2a0 [ 3109.523285] do_user_addr_fault+0x56e/0xc60 [ 3109.523785] exc_page_fault+0xa2/0x1a0 [ 3109.524230] ? asm_exc_page_fault+0x8/0x30 [ 3109.524717] asm_exc_page_fault+0x1e/0x30 [ 3109.525192] RIP: 0033:0x7f7b043ea7e0 [ 3109.525617] Code: Unable to access opcode bytes at RIP 0x7f7b043ea7b6. [ 3109.526366] RSP: 002b:00007ffefba83ce8 EFLAGS: 00010246 [ 3109.526972] RAX: 0000000000000000 RBX: 0000000000000409 RCX: 0000000000000014 [ 3109.527781] RDX: 0000000000000b3d RSI: 0000000000000409 RDI: 00007f7b044a8053 [ 3109.528593] RBP: 00007ffefba83d4c R08: 0000000000000c24 R09: 00007ffefbaac080 [ 3109.529412] R10: 00007ffefbaac090 R11: 000000000059b3bc R12: 0000000000000064 [ 3109.530225] R13: 00000000002f6522 R14: 0000000000000014 R15: 00007ffefba83db0 [ 3109.532113] Mem-Info: [ 3109.532526] active_anon:693 inactive_anon:60341 isolated_anon:0 [ 3109.532526] active_file:8 inactive_file:4 isolated_file:0 [ 3109.532526] unevictable:0 dirty:0 writeback:0 [ 3109.532526] slab_reclaimable:9408 slab_unreclaimable:59783 [ 3109.532526] mapped:69650 shmem:120 pagetables:978 bounce:0 [ 3109.532526] free:2842 free_pcp:0 free_cma:0 [ 3109.536018] Node 0 active_anon:2772kB inactive_anon:241364kB active_file:32kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278600kB dirty:0kB writeback:0kB shmem:480kB writeback_tmp:0kB kernel_stack:3648kB all_unreclaimable? yes [ 3109.538623] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3109.541573] lowmem_reserve[]: 0 1616 1616 1616 [ 3109.542109] Node 0 DMA32 free:4860kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:2772kB inactive_anon:241364kB active_file:44kB inactive_file:60kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:3912kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3109.545311] lowmem_reserve[]: 0 0 0 0 [ 3109.545761] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3109.547315] Node 0 DMA32: 378*4kB (UME) 131*8kB (UME) 42*16kB (UME) 38*32kB (UM) 16*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5472kB [ 3109.548961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3109.549939] 149 total pagecache pages [ 3109.550380] 0 pages in swap cache [ 3109.550769] Swap cache stats: add 0, delete 0, find 0/0 [ 3109.551390] Free swap = 0kB [ 3109.551730] Total swap = 0kB [ 3109.552072] 524158 pages RAM [ 3109.552431] 0 pages HighMem/MovableOnly [ 3109.552876] 105068 pages reserved [ 3109.553291] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz6,mems_allowed=0,global_oom,task_memcg=/syz6,task=syz-executor.6,pid=286,uid=0 [ 3109.554897] Out of memory (oom_kill_allocating_task): Killed process 286 (syz-executor.6) total-vm:93280kB, anon-rss:396kB, file-rss:34328kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 3109.798233] in:imklog invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3109.799351] CPU: 0 PID: 177 Comm: in:imklog Not tainted 5.10.239 #1 [ 3109.800060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3109.800995] Call Trace: [ 3109.801300] dump_stack+0x107/0x167 [ 3109.801712] dump_header+0x107/0x689 [ 3109.802136] oom_kill_process.cold+0x10/0x15 [ 3109.802636] out_of_memory+0x1149/0x1440 [ 3109.803099] ? oom_killer_disable+0x280/0x280 [ 3109.803606] ? mutex_trylock+0x237/0x2b0 [ 3109.804067] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 3109.804737] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 3109.805414] ? lock_acquire+0x177/0x470 [ 3109.805863] ? warn_alloc+0x190/0x190 [ 3109.806310] __alloc_pages_nodemask+0x51d/0x600 [ 3109.806838] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3109.807519] ? find_get_entry+0x2c8/0x740 [ 3109.807996] alloc_pages_current+0x187/0x280 [ 3109.808496] __page_cache_alloc+0x2d2/0x360 [ 3109.808991] pagecache_get_page+0x2c7/0xc80 [ 3109.809489] filemap_fault+0x177d/0x2210 [ 3109.809952] ? read_cache_page_gfp+0x30/0x30 [ 3109.810450] ? replace_page_cache_page+0x1200/0x1200 [ 3109.811025] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3109.811622] ext4_filemap_fault+0x87/0xc0 [ 3109.812092] __do_fault+0x113/0x410 [ 3109.812507] handle_mm_fault+0x1e53/0x3500 [ 3109.812986] ? finish_task_switch+0x126/0x5d0 [ 3109.813503] ? find_held_lock+0x2c/0x110 [ 3109.813961] ? __pmd_alloc+0x630/0x630 [ 3109.814410] ? vmacache_find+0x55/0x2a0 [ 3109.814863] do_user_addr_fault+0x56e/0xc60 [ 3109.815356] exc_page_fault+0xa2/0x1a0 [ 3109.815797] ? asm_exc_page_fault+0x8/0x30 [ 3109.816274] asm_exc_page_fault+0x1e/0x30 [ 3109.816736] RIP: 0033:0x7f3be4cd0ac0 [ 3109.817169] Code: Unable to access opcode bytes at RIP 0x7f3be4cd0a96. [ 3109.817904] RSP: 002b:00007f3be43be268 EFLAGS: 00010202 [ 3109.818508] RAX: 000055f2bb2cd490 RBX: 0000000068612d43 RCX: 0000000000000001 [ 3109.819312] RDX: 000055f2bb2cd490 RSI: 000055f2bb2cd498 RDI: 000055f2bb2cd498 [ 3109.820117] RBP: 000055f2bb2cd498 R08: 00007f3be43be330 R09: 000000000059b34c [ 3109.820923] R10: 00007ffc1977a080 R11: 0000000000000280 R12: 00007f3be4d30430 [ 3109.821733] R13: 00007f3be43be390 R14: 0000000000000000 R15: 0000000000000000 [ 3109.822572] Mem-Info: [ 3109.822862] active_anon:693 inactive_anon:60320 isolated_anon:0 [ 3109.822862] active_file:18 inactive_file:14 isolated_file:0 [ 3109.822862] unevictable:0 dirty:0 writeback:0 [ 3109.822862] slab_reclaimable:9408 slab_unreclaimable:59738 [ 3109.822862] mapped:69650 shmem:120 pagetables:978 bounce:0 [ 3109.822862] free:2302 free_pcp:295 free_cma:0 [ 3109.826404] Node 0 active_anon:2772kB inactive_anon:241280kB active_file:72kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278600kB dirty:0kB writeback:0kB shmem:480kB writeback_tmp:0kB kernel_stack:3616kB all_unreclaimable? yes [ 3109.828988] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3109.833083] lowmem_reserve[]: 0 1616 1616 1616 [ 3109.833764] Node 0 DMA32 free:2720kB min:9212kB low:10864kB high:12516kB reserved_highatomic:0KB active_anon:2772kB inactive_anon:241364kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:3912kB bounce:0kB free_pcp:1180kB local_pcp:660kB free_cma:0kB [ 3109.837009] lowmem_reserve[]: 0 0 0 0 [ 3109.837486] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 3109.839001] Node 0 DMA32: 244*4kB (UME) 104*8kB (UME) 26*16kB (UME) 16*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2736kB [ 3109.840581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3109.841549] 149 total pagecache pages [ 3109.841976] 0 pages in swap cache [ 3109.842385] Swap cache stats: add 0, delete 0, find 0/0 [ 3109.842979] Free swap = 0kB [ 3109.843343] Total swap = 0kB [ 3109.843682] 524158 pages RAM [ 3109.844023] 0 pages HighMem/MovableOnly [ 3109.844486] 105068 pages reserved [ 3109.844875] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/rsyslog.service,task=in:imklog,pid=177,uid=0 [ 3109.847200] Out of memory (oom_kill_allocating_task): Killed process 173 (rsyslogd) total-vm:220876kB, anon-rss:1108kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:0 [ 3110.060050] syz-executor.3: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 3110.063214] CPU: 1 PID: 14378 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 3110.064652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3110.066394] Call Trace: [ 3110.066950] dump_stack+0x107/0x167 [ 3110.067713] warn_alloc.cold+0x95/0x18a [ 3110.068547] ? zone_watermark_ok_safe+0x260/0x260 [ 3110.069568] ? queue_oom_reaper+0x86/0x1e0 [ 3110.070455] ? wait_for_completion_io+0x270/0x270 [ 3110.071459] __alloc_pages_slowpath.constprop.0+0x1cbe/0x2200 [ 3110.072674] ? lock_acquire+0x177/0x470 [ 3110.073512] ? warn_alloc+0x190/0x190 [ 3110.074326] __alloc_pages_nodemask+0x51d/0x600 [ 3110.075292] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3110.076415] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3110.077671] ? policy_node+0x11a/0x140 [ 3110.078484] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 3110.079467] alloc_pages_current+0x187/0x280 [ 3110.080374] ? __sanitizer_cov_trace_pc+0x55/0x60 [ 3110.081382] relay_open_buf.part.0+0x2a5/0xc00 [ 3110.082339] relay_open+0x531/0xa10 [ 3110.083095] do_blk_trace_setup+0x4cf/0xc10 [ 3110.083984] ? _copy_from_user+0xfb/0x1b0 [ 3110.084839] __blk_trace_setup+0xca/0x180 [ 3110.085757] ? do_blk_trace_setup+0xc10/0xc10 [ 3110.086699] blk_trace_ioctl+0x155/0x290 [ 3110.087529] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 3110.088527] ? do_vfs_ioctl+0x283/0x10d0 [ 3110.089367] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3110.090437] ? generic_block_fiemap+0x60/0x60 [ 3110.091358] ? lock_downgrade+0x6d0/0x6d0 [ 3110.092217] blkdev_ioctl+0xc1/0x710 [ 3110.092984] ? blkdev_common_ioctl+0x1930/0x1930 [ 3110.093966] ? selinux_file_ioctl+0xb6/0x270 [ 3110.094871] block_ioctl+0xf9/0x140 [ 3110.095614] ? blkdev_read_iter+0x1c0/0x1c0 [ 3110.096501] __x64_sys_ioctl+0x19a/0x210 [ 3110.097351] do_syscall_64+0x33/0x40 [ 3110.098118] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3110.099181] RIP: 0033:0x7fcde86deb19 [ 3110.099947] Code: Unable to access opcode bytes at RIP 0x7fcde86deaef. [ 3110.101303] RSP: 002b:00007fcde5c54188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3110.102869] RAX: ffffffffffffffda RBX: 00007fcde87f1f60 RCX: 00007fcde86deb19 [ 3110.104337] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 3110.105798] RBP: 00007fcde8738f6d R08: 0000000000000000 R09: 0000000000000000 [ 3110.107246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3110.108695] R13: 00007ffeb500b04f R14: 00007fcde5c54300 R15: 0000000000022000 [ 3110.110205] Mem-Info: [ 3110.110725] active_anon:693 inactive_anon:60301 isolated_anon:0 [ 3110.110725] active_file:33 inactive_file:17 isolated_file:0 [ 3110.110725] unevictable:0 dirty:0 writeback:0 [ 3110.110725] slab_reclaimable:9393 slab_unreclaimable:59626 [ 3110.110725] mapped:69634 shmem:120 pagetables:920 bounce:0 [ 3110.110725] free:2412 free_pcp:309 free_cma:0 [ 3110.117044] Node 0 active_anon:2772kB inactive_anon:241204kB active_file:132kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:480kB writeback_tmp:0kB kernel_stack:3552kB all_unreclaimable? yes [ 3110.121749] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3110.127037] lowmem_reserve[]: 0 1616 1616 1616 [ 3110.128025] Node 0 DMA32 free:3160kB min:9212kB low:10864kB high:12516kB reserved_highatomic:0KB active_anon:2772kB inactive_anon:241204kB active_file:132kB inactive_file:68kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:3680kB bounce:0kB free_pcp:1236kB local_pcp:576kB free_cma:0kB [ 3110.133894] lowmem_reserve[]: 0 0 0 0 [ 3110.134735] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 3110.137447] Node 0 DMA32: 244*4kB (UME) 109*8kB (UME) 26*16kB (UME) 28*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3160kB [ 3110.140744] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3110.142547] 141 total pagecache pages [ 3110.143338] 0 pages in swap cache [ 3110.144035] Swap cache stats: add 0, delete 0, find 0/0 [ 3110.145150] Free swap = 0kB [ 3110.145761] Total swap = 0kB [ 3110.146402] 524158 pages RAM [ 3110.147009] 0 pages HighMem/MovableOnly [ 3110.147831] 105068 pages reserved 12:10:56 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x2}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:10:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 82) 12:10:56 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:10:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20020, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, 'ext4\x00'}}], [{@uid_eq={'uid', 0x3d, r2}}, {@subj_role={'subj_role', 0x3d, '\b\x00\x00\xa0P\xf0jd\xd8\xd5\x9c$\xd7X\x8c\xd9)\xdf\xaa\x126]\xf9\xfd\x9d#\xa5\xce\x89-\x14=\xf1\x8bL\x01\xe6\\\x83\xd2wG\xc8\xf8\xef)_\xc4\xf5\x1d\x89%\xe1\x97\x11\x8b\t\xf7\x05\n?D\v\xdd\xae2\x1a\xcc\xd1\xc9\xb1\x0f\xf9\xbb\v\x04jB\xeb\xb2\x00\xea\xf1\xd9r\xa9\xc6\x89\xfe\xee4\xaf\x85k\xc1\xd8\xa9\xdf\x98\xb1Z\x80C[*\xb7\xa4W\x8e\xa38q\x12O\x86\xfe\xddH'}}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@dont_appraise}, {@appraise_type}]}}) 12:10:56 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:10:56 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x5000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:10:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:10:56 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)=0x0) syz_io_uring_setup(0x1d2d, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r3) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0xa, &(0x7f0000000180)={0x0, 0x3938700}, 0x1, 0x1, 0x1, {0x0, r3}}, 0x6) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) [ 3121.949023] blktrace: Concurrent blktraces are not allowed on loop14 [ 3121.957422] FAULT_INJECTION: forcing a failure. [ 3121.957422] name failslab, interval 1, probability 0, space 0, times 0 [ 3121.959773] CPU: 0 PID: 14433 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3121.961251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3121.963139] Call Trace: [ 3121.963698] dump_stack+0x107/0x167 [ 3121.964465] should_fail.cold+0x5/0xa [ 3121.965297] ? __alloc_skb+0x6d/0x5b0 [ 3121.966104] should_failslab+0x5/0x20 [ 3121.966907] kmem_cache_alloc_node+0x55/0x330 [ 3121.967855] __alloc_skb+0x6d/0x5b0 [ 3121.968625] alloc_skb_with_frags+0x92/0x570 [ 3121.969597] sock_alloc_send_pskb+0x7af/0x930 [ 3121.970542] ? sk_alloc+0x350/0x350 [ 3121.971308] ? create_object.isra.0+0x3ad/0xa20 [ 3121.972281] ? lock_release+0x680/0x680 [ 3121.973113] ? find_held_lock+0x2c/0x110 [ 3121.974009] __ip_append_data+0x162d/0x3310 [ 3121.974919] ? lock_downgrade+0x6d0/0x6d0 [ 3121.975791] ? do_raw_spin_lock+0x121/0x260 [ 3121.976693] ? ip_frag_init+0x350/0x350 [ 3121.977568] ? __ip_finish_output.part.0+0xb70/0xb70 [ 3121.978633] ? ip_route_output_key_hash+0x19c/0x340 [ 3121.979670] ? ipv4_mtu+0x1ed/0x2c0 [ 3121.980444] ip_make_skb+0x22a/0x2a0 [ 3121.981254] ? ip_frag_init+0x350/0x350 [ 3121.982109] ? ip_flush_pending_frames+0x20/0x20 [ 3121.983108] ? lock_downgrade+0x6d0/0x6d0 [ 3121.983976] ? xfrm_lookup_route+0x65/0x210 [ 3121.984883] udp_sendmsg+0x161b/0x2220 [ 3121.985727] ? ip_frag_init+0x350/0x350 [ 3121.986574] ? udp_setsockopt+0xc0/0xc0 [ 3121.987424] ? sock_has_perm+0x1ea/0x280 [ 3121.988300] ? __import_iovec+0x458/0x590 [ 3121.989172] ? udp_setsockopt+0xc0/0xc0 [ 3121.990034] inet_sendmsg+0x105/0x140 [ 3121.990831] ? inet_send_prepare+0x540/0x540 [ 3121.991752] __sock_sendmsg+0x13c/0x190 [ 3121.992593] ____sys_sendmsg+0x334/0x870 [ 3121.993496] ? sock_write_iter+0x3d0/0x3d0 [ 3121.994386] ? do_recvmmsg+0x6d0/0x6d0 [ 3121.995200] ? __lock_acquire+0x1657/0x5b00 [ 3121.996113] ___sys_sendmsg+0xf3/0x170 [ 3121.996934] ? sendmsg_copy_msghdr+0x160/0x160 [ 3121.997919] ? __fget_files+0x2cf/0x520 [ 3121.998759] ? lock_acquire+0x197/0x470 [ 3121.999615] ? find_held_lock+0x2c/0x110 [ 3122.000479] ? __might_fault+0xd3/0x180 [ 3122.001357] ? lock_downgrade+0x6d0/0x6d0 [ 3122.002261] __sys_sendmmsg+0x195/0x470 [ 3122.003103] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3122.004015] ? lock_downgrade+0x6d0/0x6d0 [ 3122.004899] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3122.005957] ? wait_for_completion_io+0x270/0x270 [ 3122.006972] ? rcu_read_lock_any_held+0x75/0xa0 [ 3122.007960] ? vfs_write+0x354/0xb10 [ 3122.008752] ? fput_many+0x2f/0x1a0 [ 3122.009556] ? ksys_write+0x1a9/0x260 [ 3122.010356] ? __ia32_sys_read+0xb0/0xb0 [ 3122.011224] __x64_sys_sendmmsg+0x99/0x100 [ 3122.012120] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3122.013222] do_syscall_64+0x33/0x40 [ 3122.014024] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3122.015102] RIP: 0033:0x7fcb10dbfb19 [ 3122.015889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3122.019801] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3122.021433] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3122.022932] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3122.024443] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3122.025984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3122.027484] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3122.078619] loop1: detected capacity change from 0 to 512 [ 3122.082490] blktrace: Concurrent blktraces are not allowed on loop4 [ 3122.097877] EXT4-fs (loop1): unable to read superblock [ 3122.105800] blktrace: Concurrent blktraces are not allowed on loop14 [ 3122.340512] loop1: detected capacity change from 0 to 512 [ 3122.344676] EXT4-fs (loop1): unable to read superblock [ 3126.813236] Bluetooth: hci4: command 0x0409 tx timeout [ 3127.005189] Bluetooth: hci7: command 0x0409 tx timeout [ 3128.861208] Bluetooth: hci4: command 0x041b tx timeout [ 3129.053169] Bluetooth: hci7: command 0x041b tx timeout [ 3129.260037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3129.261565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3129.263431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3129.292570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3129.293574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3129.295833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3129.296784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3129.300423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3129.301571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3129.327531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3129.328502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3129.329772] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3130.910202] Bluetooth: hci4: command 0x040f tx timeout [ 3131.102408] Bluetooth: hci7: command 0x040f tx timeout [ 3132.957244] Bluetooth: hci4: command 0x0419 tx timeout [ 3133.149244] Bluetooth: hci7: command 0x0419 tx timeout 12:11:18 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:11:18 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x210201, 0x1) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x602, 0x14) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:11:18 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x3}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:11:18 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x6000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:11:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 83) 12:11:18 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:11:18 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:11:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) [ 3143.893196] FAULT_INJECTION: forcing a failure. [ 3143.893196] name failslab, interval 1, probability 0, space 0, times 0 [ 3143.895623] CPU: 0 PID: 15374 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3143.897071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3143.898941] Call Trace: [ 3143.899578] dump_stack+0x107/0x167 [ 3143.900344] should_fail.cold+0x5/0xa [ 3143.901145] ? __alloc_skb+0x6d/0x5b0 [ 3143.901965] should_failslab+0x5/0x20 [ 3143.902758] kmem_cache_alloc_node+0x55/0x330 [ 3143.903702] __alloc_skb+0x6d/0x5b0 [ 3143.904465] alloc_skb_with_frags+0x92/0x570 [ 3143.905403] sock_alloc_send_pskb+0x7af/0x930 [ 3143.906362] ? sk_alloc+0x350/0x350 [ 3143.907122] ? create_object.isra.0+0x3ad/0xa20 [ 3143.908104] ? lock_release+0x680/0x680 [ 3143.908937] ? find_held_lock+0x2c/0x110 [ 3143.909808] __ip_append_data+0x162d/0x3310 [ 3143.910719] ? lock_downgrade+0x6d0/0x6d0 [ 3143.911582] ? do_raw_spin_lock+0x121/0x260 [ 3143.912498] ? ip_frag_init+0x350/0x350 [ 3143.913345] ? __ip_finish_output.part.0+0xb70/0xb70 [ 3143.914417] ? ip_route_output_key_hash+0x19c/0x340 [ 3143.915459] ? ipv4_mtu+0x1ed/0x2c0 [ 3143.916230] ip_make_skb+0x22a/0x2a0 [ 3143.917018] ? ip_frag_init+0x350/0x350 [ 3143.917862] ? ip_flush_pending_frames+0x20/0x20 [ 3143.918859] ? lock_downgrade+0x6d0/0x6d0 [ 3143.919731] ? xfrm_lookup_route+0x65/0x210 [ 3143.920637] udp_sendmsg+0x161b/0x2220 [ 3143.921464] ? ip_frag_init+0x350/0x350 [ 3143.922303] ? udp_setsockopt+0xc0/0xc0 [ 3143.923155] ? sock_has_perm+0x1ea/0x280 [ 3143.924025] ? __import_iovec+0x458/0x590 [ 3143.924892] ? udp_setsockopt+0xc0/0xc0 [ 3143.925749] inet_sendmsg+0x105/0x140 [ 3143.926554] ? inet_send_prepare+0x540/0x540 [ 3143.927483] __sock_sendmsg+0x13c/0x190 [ 3143.928316] ____sys_sendmsg+0x334/0x870 [ 3143.929170] ? sock_write_iter+0x3d0/0x3d0 [ 3143.930068] ? do_recvmmsg+0x6d0/0x6d0 [ 3143.930885] ? find_held_lock+0x2c/0x110 [ 3143.931743] ___sys_sendmsg+0xf3/0x170 [ 3143.932558] ? sendmsg_copy_msghdr+0x160/0x160 [ 3143.933521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3143.934610] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3143.935541] ? trace_hardirqs_on+0x5b/0x180 [ 3143.936455] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3143.937386] ? finish_task_switch+0x126/0x5d0 [ 3143.938325] ? finish_task_switch+0xef/0x5d0 [ 3143.939241] ? __switch_to+0x572/0xf70 [ 3143.940049] ? __switch_to_asm+0x3a/0x60 [ 3143.940890] ? __switch_to_asm+0x34/0x60 [ 3143.941749] ? __schedule+0x82c/0x1ea0 [ 3143.942577] ? io_schedule_timeout+0x140/0x140 [ 3143.943560] __sys_sendmmsg+0x195/0x470 [ 3143.944397] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3143.945302] ? lock_downgrade+0x6d0/0x6d0 [ 3143.946187] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3143.947211] ? wait_for_completion_io+0x270/0x270 [ 3143.948220] ? rcu_read_lock_any_held+0x75/0xa0 [ 3143.949188] ? vfs_write+0x354/0xb10 [ 3143.949974] ? fput_many+0x2f/0x1a0 [ 3143.950739] ? ksys_write+0x1a9/0x260 [ 3143.951540] ? __ia32_sys_read+0xb0/0xb0 [ 3143.952406] __x64_sys_sendmmsg+0x99/0x100 [ 3143.953295] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3143.954389] do_syscall_64+0x33/0x40 [ 3143.955172] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3143.956248] RIP: 0033:0x7fcb10dbfb19 [ 3143.957036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3143.960887] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3143.962507] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3143.964014] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3143.965514] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3143.967015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3143.968501] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3143.971904] loop1: detected capacity change from 0 to 512 [ 3143.991422] EXT4-fs (loop1): unable to read superblock [ 3143.997880] blktrace: Concurrent blktraces are not allowed on loop4 [ 3144.006679] blktrace: Concurrent blktraces are not allowed on loop14 [ 3144.018821] blktrace: Concurrent blktraces are not allowed on loop6 [ 3144.039630] loop1: detected capacity change from 0 to 512 [ 3144.083519] EXT4-fs (loop1): unable to read superblock 12:11:18 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3144.098428] blktrace: Concurrent blktraces are not allowed on loop14 12:11:18 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:11:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 84) [ 3144.225364] blktrace: Concurrent blktraces are not allowed on loop4 [ 3144.255400] FAULT_INJECTION: forcing a failure. [ 3144.255400] name failslab, interval 1, probability 0, space 0, times 0 [ 3144.257799] CPU: 0 PID: 15400 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3144.259241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3144.260964] Call Trace: [ 3144.261541] dump_stack+0x107/0x167 [ 3144.262303] should_fail.cold+0x5/0xa [ 3144.263111] ? create_object.isra.0+0x3a/0xa20 [ 3144.264059] should_failslab+0x5/0x20 [ 3144.264853] kmem_cache_alloc+0x5b/0x310 [ 3144.265718] create_object.isra.0+0x3a/0xa20 [ 3144.266628] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3144.267690] kmem_cache_alloc_node+0x169/0x330 [ 3144.268644] __alloc_skb+0x6d/0x5b0 [ 3144.269410] alloc_skb_with_frags+0x92/0x570 [ 3144.270345] sock_alloc_send_pskb+0x7af/0x930 [ 3144.271293] ? sk_alloc+0x350/0x350 [ 3144.272046] ? create_object.isra.0+0x3ad/0xa20 [ 3144.273018] ? lock_release+0x680/0x680 [ 3144.273852] ? find_held_lock+0x2c/0x110 [ 3144.274702] __ip_append_data+0x162d/0x3310 [ 3144.275612] ? lock_downgrade+0x6d0/0x6d0 [ 3144.276475] ? do_raw_spin_lock+0x121/0x260 [ 3144.277370] ? ip_frag_init+0x350/0x350 [ 3144.278220] ? __ip_finish_output.part.0+0xb70/0xb70 [ 3144.279271] ? ip_route_output_key_hash+0x19c/0x340 [ 3144.280306] ? ipv4_mtu+0x1ed/0x2c0 [ 3144.281065] ip_make_skb+0x22a/0x2a0 [ 3144.281855] ? ip_frag_init+0x350/0x350 [ 3144.282684] ? ip_flush_pending_frames+0x20/0x20 [ 3144.283672] ? lock_downgrade+0x6d0/0x6d0 [ 3144.284538] ? xfrm_lookup_route+0x65/0x210 [ 3144.285455] udp_sendmsg+0x161b/0x2220 [ 3144.286275] ? ip_frag_init+0x350/0x350 [ 3144.287105] ? udp_setsockopt+0xc0/0xc0 [ 3144.287951] ? sock_has_perm+0x1ea/0x280 [ 3144.288814] ? __import_iovec+0x458/0x590 [ 3144.289689] ? udp_setsockopt+0xc0/0xc0 [ 3144.290519] inet_sendmsg+0x105/0x140 [ 3144.291311] ? inet_send_prepare+0x540/0x540 [ 3144.292230] __sock_sendmsg+0x13c/0x190 [ 3144.293062] ____sys_sendmsg+0x334/0x870 [ 3144.293914] ? sock_write_iter+0x3d0/0x3d0 [ 3144.294786] ? do_recvmmsg+0x6d0/0x6d0 [ 3144.295593] ? __lock_acquire+0x1657/0x5b00 [ 3144.296505] ___sys_sendmsg+0xf3/0x170 [ 3144.297313] ? sendmsg_copy_msghdr+0x160/0x160 [ 3144.298281] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3144.299360] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3144.300312] ? trace_hardirqs_on+0x5b/0x180 [ 3144.301208] ? lock_acquire+0x197/0x470 [ 3144.302043] ? find_held_lock+0x2c/0x110 [ 3144.302890] ? __might_fault+0xd3/0x180 [ 3144.303711] ? lock_downgrade+0x6d0/0x6d0 [ 3144.304593] __sys_sendmmsg+0x195/0x470 [ 3144.305440] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3144.306334] ? lock_downgrade+0x6d0/0x6d0 [ 3144.307209] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3144.308223] ? wait_for_completion_io+0x270/0x270 [ 3144.309229] ? rcu_read_lock_any_held+0x75/0xa0 [ 3144.310218] ? vfs_write+0x354/0xb10 [ 3144.310995] ? fput_many+0x2f/0x1a0 [ 3144.311754] ? ksys_write+0x1a9/0x260 [ 3144.312541] ? __ia32_sys_read+0xb0/0xb0 [ 3144.313393] __x64_sys_sendmmsg+0x99/0x100 [ 3144.314288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3144.315355] do_syscall_64+0x33/0x40 [ 3144.316124] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3144.317195] RIP: 0033:0x7fcb10dbfb19 [ 3144.317974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3144.321787] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3144.323372] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3144.324847] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3144.326336] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3144.327821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3144.329300] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:11:18 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x4}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:11:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x800000, &(0x7f0000000040)=ANY=[]) [ 3144.375581] loop1: detected capacity change from 0 to 512 [ 3144.382586] blktrace: Concurrent blktraces are not allowed on loop6 [ 3144.384102] EXT4-fs (loop1): unable to read superblock 12:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 85) 12:11:30 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:11:30 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:11:30 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/4\x00') renameat(r1, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file1\x00') ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x29e, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x68, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3f, @link='syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0x4810) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:11:30 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x7000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:11:30 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:11:30 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) fsmount(0xffffffffffffffff, 0x0, 0x1) signalfd(r0, &(0x7f0000000080)={[0x1]}, 0x8) 12:11:30 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x5}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 3156.557656] loop1: detected capacity change from 0 to 512 [ 3156.604487] EXT4-fs (loop1): unable to read superblock [ 3156.609479] FAULT_INJECTION: forcing a failure. [ 3156.609479] name failslab, interval 1, probability 0, space 0, times 0 [ 3156.611663] CPU: 0 PID: 15420 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3156.612893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3156.614358] Call Trace: [ 3156.614826] dump_stack+0x107/0x167 [ 3156.615465] should_fail.cold+0x5/0xa [ 3156.616142] should_failslab+0x5/0x20 [ 3156.616809] __kmalloc_node_track_caller+0x74/0x3b0 [ 3156.617689] ? alloc_skb_with_frags+0x92/0x570 [ 3156.618509] __alloc_skb+0xb1/0x5b0 [ 3156.618599] blktrace: Concurrent blktraces are not allowed on loop6 [ 3156.619150] alloc_skb_with_frags+0x92/0x570 [ 3156.619177] sock_alloc_send_pskb+0x7af/0x930 [ 3156.621484] ? sk_alloc+0x350/0x350 [ 3156.622178] ? create_object.isra.0+0x3ad/0xa20 [ 3156.623005] ? lock_release+0x680/0x680 [ 3156.623704] ? find_held_lock+0x2c/0x110 [ 3156.624426] __ip_append_data+0x162d/0x3310 [ 3156.625186] ? lock_downgrade+0x6d0/0x6d0 [ 3156.625919] ? do_raw_spin_lock+0x121/0x260 [ 3156.626684] ? ip_frag_init+0x350/0x350 [ 3156.627389] ? __ip_finish_output.part.0+0xb70/0xb70 [ 3156.628283] ? ip_route_output_key_hash+0x19c/0x340 [ 3156.629148] ? ipv4_mtu+0x1ed/0x2c0 [ 3156.629803] ip_make_skb+0x22a/0x2a0 [ 3156.630460] ? ip_frag_init+0x350/0x350 12:11:30 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, 0x0) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3156.631165] ? ip_flush_pending_frames+0x20/0x20 [ 3156.631802] loop1: detected capacity change from 0 to 512 [ 3156.632212] ? lock_downgrade+0x6d0/0x6d0 [ 3156.632234] ? xfrm_lookup_route+0x65/0x210 [ 3156.634333] udp_sendmsg+0x161b/0x2220 [ 3156.635018] ? ip_frag_init+0x350/0x350 [ 3156.635716] ? udp_setsockopt+0xc0/0xc0 [ 3156.636437] ? sock_has_perm+0x1ea/0x280 [ 3156.637163] ? __import_iovec+0x458/0x590 [ 3156.637937] ? udp_setsockopt+0xc0/0xc0 [ 3156.638632] inet_sendmsg+0x105/0x140 [ 3156.639289] ? inet_send_prepare+0x540/0x540 [ 3156.640056] __sock_sendmsg+0x13c/0x190 [ 3156.640745] ____sys_sendmsg+0x334/0x870 [ 3156.641448] ? sock_write_iter+0x3d0/0x3d0 [ 3156.642184] ? do_recvmmsg+0x6d0/0x6d0 [ 3156.642859] ? __lock_acquire+0x1657/0x5b00 [ 3156.643613] ___sys_sendmsg+0xf3/0x170 [ 3156.644295] ? sendmsg_copy_msghdr+0x160/0x160 [ 3156.645133] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3156.645235] EXT4-fs (loop1): unable to read superblock [ 3156.646103] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3156.646124] ? trace_hardirqs_on+0x5b/0x180 [ 3156.648311] ? lock_acquire+0x197/0x470 [ 3156.649033] ? find_held_lock+0x2c/0x110 [ 3156.649794] ? __might_fault+0xd3/0x180 [ 3156.650522] ? lock_downgrade+0x6d0/0x6d0 [ 3156.651291] __sys_sendmmsg+0x195/0x470 [ 3156.652019] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3156.652804] ? lock_downgrade+0x6d0/0x6d0 [ 3156.653583] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3156.654470] ? wait_for_completion_io+0x270/0x270 [ 3156.655351] ? rcu_read_lock_any_held+0x75/0xa0 [ 3156.656200] ? vfs_write+0x354/0xb10 [ 3156.656880] ? fput_many+0x2f/0x1a0 [ 3156.657557] ? ksys_write+0x1a9/0x260 [ 3156.658257] ? __ia32_sys_read+0xb0/0xb0 [ 3156.659004] __x64_sys_sendmmsg+0x99/0x100 [ 3156.659784] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3156.660720] do_syscall_64+0x33/0x40 [ 3156.661404] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3156.662324] RIP: 0033:0x7fcb10dbfb19 [ 3156.662994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3156.666279] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3156.667650] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3156.668939] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3156.670248] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3156.671533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3156.672805] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3156.690596] blktrace: Concurrent blktraces are not allowed on loop14 [ 3156.693299] blktrace: Concurrent blktraces are not allowed on loop4 [ 3156.729218] blktrace: Concurrent blktraces are not allowed on loop14 12:11:30 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:11:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x73}], 0x0, &(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES16, @ANYRES32=0x0, @ANYRES64]) [ 3156.781730] blktrace: Concurrent blktraces are not allowed on loop4 12:11:30 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x6}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:11:30 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) mknodat$null(r0, &(0x7f0000000040)='./file0\x00', 0x1, 0x103) 12:11:30 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:11:31 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x25110000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 86) 12:11:31 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)=0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000340)=@llc={0x1a, 0xab87b060c2fda50a, 0x40, 0x2, 0x3, 0x4, @remote}, 0x0, 0x0, 0x1, {0x0, r4}}, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) [ 3156.884331] loop1: detected capacity change from 0 to 512 [ 3156.887897] blktrace: Concurrent blktraces are not allowed on loop6 [ 3156.892525] blktrace: Concurrent blktraces are not allowed on loop14 [ 3156.912098] EXT4-fs (loop1): unable to read superblock [ 3156.912733] blktrace: Concurrent blktraces are not allowed on loop14 12:11:31 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:11:31 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x50) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) syncfs(0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f00000001c0)) creat(&(0x7f0000000180)='./file0\x00', 0x10) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:11:31 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, 0x0) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:11:31 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:11:31 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0xffffe000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3156.960228] loop1: detected capacity change from 0 to 512 [ 3156.964860] EXT4-fs (loop1): unable to read superblock [ 3157.011724] FAULT_INJECTION: forcing a failure. [ 3157.011724] name failslab, interval 1, probability 0, space 0, times 0 [ 3157.013479] CPU: 0 PID: 15474 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3157.014552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3157.015729] Call Trace: [ 3157.016095] dump_stack+0x107/0x167 [ 3157.016595] should_fail.cold+0x5/0xa [ 3157.017110] ? create_object.isra.0+0x3a/0xa20 [ 3157.017750] should_failslab+0x5/0x20 [ 3157.018265] kmem_cache_alloc+0x5b/0x310 [ 3157.018814] create_object.isra.0+0x3a/0xa20 [ 3157.019408] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3157.020132] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3157.020818] ? alloc_skb_with_frags+0x92/0x570 [ 3157.021476] __alloc_skb+0xb1/0x5b0 [ 3157.021979] alloc_skb_with_frags+0x92/0x570 [ 3157.022579] sock_alloc_send_pskb+0x7af/0x930 [ 3157.023190] ? sk_alloc+0x350/0x350 [ 3157.023678] ? create_object.isra.0+0x3ad/0xa20 [ 3157.024341] ? lock_release+0x680/0x680 [ 3157.024876] ? find_held_lock+0x2c/0x110 [ 3157.025433] __ip_append_data+0x162d/0x3310 [ 3157.026027] ? lock_downgrade+0x6d0/0x6d0 [ 3157.026587] ? do_raw_spin_lock+0x121/0x260 [ 3157.027171] ? ip_frag_init+0x350/0x350 [ 3157.027741] ? __ip_finish_output.part.0+0xb70/0xb70 [ 3157.028427] ? ip_route_output_key_hash+0x19c/0x340 [ 3157.029091] ? ipv4_mtu+0x1ed/0x2c0 [ 3157.029626] ip_make_skb+0x22a/0x2a0 [ 3157.030128] ? ip_frag_init+0x350/0x350 [ 3157.030664] ? ip_flush_pending_frames+0x20/0x20 [ 3157.031315] ? lock_downgrade+0x6d0/0x6d0 [ 3157.031872] ? xfrm_lookup_route+0x65/0x210 [ 3157.032453] udp_sendmsg+0x161b/0x2220 [ 3157.032980] ? ip_frag_init+0x350/0x350 [ 3157.033515] ? udp_setsockopt+0xc0/0xc0 [ 3157.034108] ? sock_has_perm+0x1ea/0x280 [ 3157.034669] ? __import_iovec+0x458/0x590 [ 3157.035258] ? udp_setsockopt+0xc0/0xc0 [ 3157.035795] inet_sendmsg+0x105/0x140 [ 3157.036306] ? inet_send_prepare+0x540/0x540 [ 3157.036894] __sock_sendmsg+0x13c/0x190 [ 3157.037431] ____sys_sendmsg+0x334/0x870 [ 3157.037982] ? sock_write_iter+0x3d0/0x3d0 [ 3157.038556] ? do_recvmmsg+0x6d0/0x6d0 [ 3157.039113] ? find_held_lock+0x2c/0x110 [ 3157.039666] ___sys_sendmsg+0xf3/0x170 [ 3157.040191] ? sendmsg_copy_msghdr+0x160/0x160 [ 3157.040799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3157.041496] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3157.042130] ? trace_hardirqs_on+0x5b/0x180 [ 3157.042704] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3157.043297] ? finish_task_switch+0x126/0x5d0 [ 3157.043887] ? finish_task_switch+0xef/0x5d0 [ 3157.044514] ? __switch_to+0x572/0xf70 [ 3157.045030] ? __switch_to_asm+0x3a/0x60 [ 3157.045572] ? __switch_to_asm+0x34/0x60 [ 3157.046113] ? __schedule+0x82c/0x1ea0 [ 3157.046635] ? io_schedule_timeout+0x140/0x140 [ 3157.047249] __sys_sendmmsg+0x195/0x470 [ 3157.047780] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3157.048351] ? lock_downgrade+0x6d0/0x6d0 [ 3157.048943] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3157.049589] ? wait_for_completion_io+0x270/0x270 [ 3157.050273] ? rcu_read_lock_any_held+0x75/0xa0 [ 3157.050893] ? vfs_write+0x354/0xb10 [ 3157.051422] ? fput_many+0x2f/0x1a0 [ 3157.051906] ? ksys_write+0x1a9/0x260 [ 3157.052444] ? __ia32_sys_read+0xb0/0xb0 [ 3157.052986] __x64_sys_sendmmsg+0x99/0x100 [ 3157.053580] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3157.054296] do_syscall_64+0x33/0x40 [ 3157.054820] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3157.055535] RIP: 0033:0x7fcb10dbfb19 [ 3157.056052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3157.058640] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3157.059704] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3157.060718] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3157.061724] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3157.062710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3157.063721] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:11:45 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x7}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:11:45 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:11:45 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, 0x0) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:11:45 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:11:45 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x18001, 0x42) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x80000001}}, './file1\x00'}) r2 = openat(r1, &(0x7f0000000500)='./file1\x00', 0x48c3, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x2010, r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x2, 0xfffffffe, 0x388}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/udplite6\x00') r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000980)={0x1264, 0x13, 0x200, 0x70bd29, 0x25dfdbfe, {0x15}, [@nested={0xb3, 0x81, 0x0, 0x1, [@generic="d69e214baa808bdbd628421ae95b66ce93d99f100d59b7e43df6515cf164c358c13cbb423b7959c5e2ad164b472b93ea7109275b0f326389f066cb41133189b8c5c1811a7a10651573ad5a4d977ab0b0de5c586cee3b86da34c4b93edae75cd35f13ec89257d1878910657649b862da355ae7ce2973dd9bcb254780dbb1e746f13fac44fe4366fbba1656cbaf583d1c9bbbada007bb14e3fd706c840c9c5c14a0928e8d5688f9f40aa4ba708819dac"]}, @nested={0x109c, 0x3, 0x0, 0x1, [@typed={0x8e, 0x34, 0x0, 0x0, @binary="809d48bd36d83b27f090e527c204edd227e4e072ad0f970060e1f3f57c4b7b6457f93618bc1b72473acf4ece45be00cad32550810e764333ada8873ce9f9fdaf4e53fcb1b9644cfbc10ad1a78f3925d2b72e854f49c323c1afa68c5782de56d5703002c87811389afe8e51cebfda8d1aee775c5ac3dc8a7802a85446cbe83d018b71fcb78be48b90e652"}, @typed={0x8, 0x10, 0x0, 0x0, @fd=r8}, @generic="a7f2cd2d628259f924df1f9fe5c3fa472a4a0b9dab0f77e7b61dc36da77a10ec9bda154358e6f4215090b21f2865059886a9984b16424c2cb001f64eb5ef935bb054cd65bb4105ca9fe70ea4bed1dee5553b232c47f2d19c858a5028852b547f7b68cb302f055faab7b582222be57f0b808eac6cabe2aeca905e98ca6c446020f45814a0baaf8e7282d59d19b3ca67162c0974b6ad6f8035d915630d511eaea4457cad70e6e0f6408139981622cc228bc09227ef9cf2981894b9f1fd51451f497ff780ef13bbecc7b7db6c5b90ed119b0b6fb1407ea94198a3681dcd21f26f32197e4f82c76635f7f23aba2ab131fcb874fadb7799cd136846bd5ca9affaa46649bdd6d471e314d93fbc900f0f405494d26dd47a44aeca848c0e5028c740d22dabb33a7169ec22a9706ee385efc2f52051b14ec39ea57e6ed2006f0f779453411f61dd5c04541c348883610a3b3e14117328e6d3bd20dd8bf7423cbd21a0681bbe11ed77a454adef10f49e4bedd50f8aef3609319de9fae37c80713cfd2b603159c065b234ecab738bdb67c1b241adf0bf34026047c2302c1fae8e4e9b430298878e1582ee5b937512db500ff0f4acdb0421072d0e2f9e2c19bc6089a607f3e590ad654fd37d6446272cba51de443b9c95fb5cd7e949d3a8e32923a62bdfbc575a0b398566ce2a4f0ee79bca75a82f582c162d9dd6c417ef5b3f367c3483d98cf199cc92a61e1c5d2b6a7f0b4f3c5127449f92470474ac8ceb77568e9e600f146e5f87c2f2a0098e60178653d11b879d16e8b4c6e366a4ae8dfbfecad727ab1325a10801edaa856e37a11058a684262cdafd81647e79d080035bd75f2355b7bc03415649561619016b17e122811ce79265caaf99861c3c640dd46245c5fdc1aa65057a6218920b4a732fa09aa202c4e7dbf20c7bf480185b75822a1cb0469c5e458c9abea14c8ccf132e534c1f7a2857d4aaba5c75c0f818006304d63a44732744d05236326ed956e19cdf8c6e261274743c1a11318248f5a4c0f626963f642ff4aa9b168778bc567d8042d67092f6e960cfc1e7f4e604046572f5ece9244d74d5d987147ecc059828f3565849570f991e198969853f36b1161d67d1506f86d01ec58fa502f13b636758d3e77caffc1a8320a0066c3338adf67de4a845404ea01b656b7c2c185e97e84825b0fbd3e0200d0019a1ce0113cb2c934ac0524aeb70e9b1d1f3489252103c946be6a077e98929d8bc9af8209ba610bb40a862534a9245a03b1986a9c5acd2f0595207ba1e135bb3c818079600dd4be33e172ff644e349b84e10d011b4a0dfd68c655bc55810862b6058de7ed8841250ec75ec8895e768c1225fb123af090d9eaff1ab49cf635e4e01f0202c5156d753d9dcb8cf586c35d9ee4efdddf6d3d10b81a967442f2464f60ae3d9b7a4db040ccede1a722b7d777652b043885b16e0b581e5e195005295dc0695431cf91e55897dfd5f3c3c9f4783685de6e9855eddd06f46158b0b1bcc7b9c78efd59a1e8d8afeffc638065725bda506d49683479492485a5175997ab7490241414408b9d61fc45934d560d2bada93bfc0eb5e3f36ab9f9afda471300f7bf8d667f51f3e8893220946af8b57e9b19bae3a02aefcbd960f11c4eaf1607bfa671e7f2a5753a7d0ba3179b2ce43b464b4b6c38c04387e5c3be49c55221fe0cb1dcc89a191b8fcb636afba12815c52dd75b66ff77f439cf4726d91d41afbb1185aa87bed87bddd6fe374ee6df43468d9b019822b77c48577ed7bdf7cb6335e4155e3cf15396c56fb2832f004a274b0ffb4ac306687b8095858ee5843caff2831d3c7713ba05b7ae48bbb2955bd4422e81339031d73dbba3515eb2371b1b0dc62949adf2edf291ed4f605857abbffc6679123f1ac2c189ecf616f91bc216727e7a499ecd89ae8b98a7f327e9ee96e543e5e800e46dc30ad2d770db1436f7eeb434318fff79c755c9e7cf009837590f59f21fac7a25887965c7a9fb943c90f7789b707e273afa579a23f5452138a0dc5e7769337ddc1409bcd80b6055ad3dc44cd0682b8d75830ccc91d8e2f88c50bd1b2be665fdcb1ce4c679cd627a49baa350e776dd70a9d90ffdc9cd5c0dc67609ced31e151419a59ad37c2ea2f0c8050e730f1b8b08209c3a8c38f1c71245f00ecac5225f484b61943e36083f7491529a01157922a08eb9908f6cd4577ee2a33c14a9185eb2044aef92ad53705f9b81c9324d8336554744a2e9311cdba7cdde78acbb19278d502b035a07e5e4ab59e20f6d14b6bdb958731246dae7be2bd3a99dd7998e72148ef7b9e3b6f60c77ef17f4b5bd3a29d076432b92a2ad74aede3b70154a12a0284557945cce5927c149f410b921711d061c1e511955b40d7c09befcd1c8f8c9e65ba4437c2fc90caeb8d4157c829b7d73f97985f6027b48c652c8db6d88dc66e17168fdc6b631a32a1b9d587c988255b7f1b3a616f71e385b3fc855bd0bcb26f86065b270fee61bfb23ce35a030cb10ba995422968693c9dfd5035b49ce7b544b4bb881fe4a82b7293433fcb0a79dbc7863db3cf79921b9578a6680615c7c68aaa4c878d7b635f1991e9dc4b1cf20c7372dd221ddd9fc4a4fa2d20f5443e5a5fdd19f9c21b0ff14971af3c29e0ae80a7b14258ab5dd26f63ec294f1fab7d7bd1634d91897c5c06beacbd62cab1410923c2a46a5f2af699b585c314675e94d7c011e31f67cf154d49fc9ec01996ee8058e1ae744d3cd16b0d371465a89db609bdfd7960b57304edfdf928c2d771b67c65394e74ceb7f47b2fb35ae280b54837feb47044c5d76ed8f8fbe317d1faf08dbd0a8c732d585b6c9da731ae74a9c450c8b406b196db0e2b274fc2730e13d89f251f2b80fd666441744ac002cbd196438ecde9310faa1f6e9670d99502ba1f9f8c9de587513c72d8b4379f14f28970d8b87854891a6c4fbac03123dc767e839fd1283a4c632a50243b81f286ca7cfd444e0dcb8b5ae0c7ced1254a1551e6fcefdd68a0c1bd51378015a8719ce87b06a2055eca853b0ce0cab87915ca60763ea884bdfc568756c1d3f5e9df7eac5c362c2a67709d943462fb926ea157394092f92b345b11b3799cd0c926e3298bca2867565a92e415cc9b1c20ab570a36f308929e452e9ecd64efe6aa3792063c6f59d8c454b4edaf3d17bbfa2033a53d5458e63f63e62a6fefaeb8c6dcb2e56c7224f3121384d23f12ebd7813ce83d418cbb95b2899a1846f11be6ebc23f8f909e9f7605e0636342faf62e2c028b17caf4886e8326654991375fabd4c3fe906d90818db6a22cc1f3b456a5796d0d27de7aaecb58d3b2b5f88c50d56dbcb67fad3330f325d784615c528c10d677644d89d62d08ede34ff5f4c31c64cc215affb2399c41a398f0c0a6667da91459e83ca66157cd2843119afece2776435fe11cdf283dc853d1448ad2eab5db65dfc62b9b9e69a99f08898e7a33f906f5c08f969b779af1d7452d1d2dc36ae54179620d09394bd01898b33d41e83bff084afb77b6b46fdaf5ecd7b71a2a6bae9268995db77e797c9b68bf1318a6d7cd41bd349b03d12b18f722824ef9843df7b5659ccb7c5bf37cd5c088d20e117df80f96a291daf89579922ce9508b4bde19e013851601471a04af5455321a367525e287e40ccd122c8722f36a2b21ff1057a6b7dad08b5e1d3f9842165a1a4e21f44dab1c81d0a3cb77805e84499107b778242f2fc59285d25612515882c8c093005a96792f1e201abcd5d7155fa01431b2d5a6b65db9d1d828de892042fc193e31e1b46ddac6163a0f467ccc2c064e88e8a7663b589a62c80ef18e1ea8b5230ff05c576590a798e2b7b76b94e36e4202ca2c40d6e17d9766785a7706ea6f6543808eb3154b880fdb512fe21eef4922b2f3781e145ceef45cf397f2435e0edcfd609772e745b9edaaa4e40c0654487aa1693ce2156ddb96cb564c523436c79555071e998e2795a4c24ad767a59d9eaa2d9ea467a1d885e38a34bec0cab7b47a3189507219c2865b20de596341047032f27046152c216025f86cea091dda1ad0b8d634599d4743af5130521d14566c0526a33036e95d0e8b387d001a76cb3aadeea33b63bfc06332fbd73776b49a7cbeeec003e6ae4323a78f9ee33b21a69700c00675d43624ee3a5f8ecb0b4a13f653beb89eefdb4b5575e292e2f832c5b95723f5a45ee5e88bca56ede675f07afa4233e568c0a4ef67d5a0d09b076188a78aa7ceec863f881a19d80a104b38ad51ec0e58d977f0bbacdfdc0494407d1cbd7198f5535a3af3852bbcafc4dc7d1549c4b7623f5d9d82e3229749ac6e9b81874181972acb78b0e57687a29c7a7061f9327b978181a69760e075dae28aa4e686d9a936e8a0de578cf5be7f209578e5e21f29c4f2e9d0d14000d8bb4718775aaa4700332e7bb130f38b3eef8f6c57175e58c76d3cd02419a2362c26f0dbef2367eafe353ad3c8c356a304cba9ea6a021719c6ceb6c07ac0077d37ab2b8ca8cfd1f2e4d047e7f27b56502eb1914e6642a5a75866bd50a4c1820c79f7d1e165646118470c64ba70abef20ec62f06741c3cc70cf4825d423786e5e21683f3ff7b83a8e428e7ce2f0c20f819276a8b066019dd93d7c74a3e3f959f241b793318d34c68f1df00c4652b6d2e7ef2280606d846b46593f5c8fb2d5564d3aae3de284323858b514baa5ee451ac6da4fb440520ac38a0cadd800acf5474ceee21aa265e0c63db2094a96cc2fa73c31a4bd017aee0838cd2255fdfccc4be9e8567263f486c1df80c037d92e8abfeaa4bcc84e6dbfd44cb13c1643e98dc6bee28b42c3a31facb460e606caf7b9be6480038d96788ece9589a29cdbab4da7e0d7c38c73a21e7c49a31640d083011b275c900f6d911802c4622be6740952a14fbc18bbaf2881125d7e8cc05b97e871d33ccc14e638d26a88bc78424d187e37279ded7d67337c70ba130aace49487ab693559def3da7477284e45742b26146a9e1f75b1c957fe015ddfb251abc7d234b9810cc2de4484878448bcdfe892a72cb579d21bb32626db8e3cfd9e41773ea0ac3b21232d5c7e756b3e1dd55f94551abb97765615c9f9956b59f8331788c70e2057ff2e524fb6ccd5968b813b52790f8440c5e53a1e385fa12e207d90f082f80898ad32ef793e4b7942bf1ed45b12ad5734502a63cff50055e4db088ff3cf044e607e05b3249c51284be168ac62589a343e638e327cff6777cc71437b3338426560f8590458843ea50e950011a1c301f3e3a4a986c73c6002f890a698a5fcdedf3f4b8512c687d9dacbba5ce475391e9dfa2da7040a9fbd69bdf64b0a116e223cf347d8e7694a953689cacb27a59c05e21561e587c3ab665bf9952d67a77c649850b1c3170cfda559c49d03f66d49deaeb153ee2743a69dcf90ad77509481c818186a395d77f397aad762d1c2bae59cc1157a601be6970db7f9bb00c522a4d7ad314027bd1767d2d2e8cd9c1711e2b950d7eb30bb871646eac6a3d2d3f22560fea7c12652be897eb9e18baf306547cf33b7d68fb622b197008dfd640d1a76d987a6e9917d6d937f0c03bcdbb5853b1bf3317b216b93ebda0332967835dc0a94ccd9fc6508208538359a216e3f487f212bbcd25b4d8b1a64be66456e2f9b61aea6b0abf217459c88113f0fd390256cbac06a820e2832733b39c1d185549e349d9fa187c32092d835460c59d2f758b84ff9ff7fba7a06e694384dc99b4e28c1c4617324ce77a0c570c887df0a37b948cc21b10b61eb981f5b24e584f89adede"]}, @typed={0xfe, 0x66, 0x0, 0x0, @binary="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"}]}, 0x1264}, 0x1, 0x0, 0x0, 0x4048800}, 0x10) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r0, 0x0, &(0x7f0000000140)='./file1\x00', 0x4, 0x200, 0x23456, {0x0, r6}}, 0x3) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001c00)={0x0, 0x7f, 0x1}) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000840)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid}, {@posixacl}, {@access_any}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r10}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) preadv(r5, &(0x7f0000000480)=[{&(0x7f0000000440)=""/62, 0x3e}], 0x1, 0x8, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000001ce59009800000088587c558b53f42ac8fc23026b1dec965fdbc91f9f86ce1d935e5af2401541d86839dac5582f0300000000000000da82cda60f2e6403f3e73d7c769ebfd06573f834f0323c1107", @ANYRES32=r9, @ANYRES32, @ANYRES32=r10, @ANYBLOB="e02f66690011ced3adc6b0bb89026c653000"]) 12:11:45 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) getpeername$unix(r1, &(0x7f0000000180), &(0x7f0000000200)=0x6e) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x40000008c7, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x3a8) 12:11:45 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0xe0ffff00000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:11:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 87) [ 3171.665978] blktrace: Concurrent blktraces are not allowed on loop6 [ 3171.701000] blktrace: Concurrent blktraces are not allowed on loop14 12:11:45 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:11:45 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3171.757567] FAULT_INJECTION: forcing a failure. [ 3171.757567] name failslab, interval 1, probability 0, space 0, times 0 [ 3171.758898] CPU: 0 PID: 15507 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3171.759694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3171.760632] Call Trace: [ 3171.760944] dump_stack+0x107/0x167 [ 3171.761359] should_fail.cold+0x5/0xa [ 3171.761799] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3171.762384] ? create_object.isra.0+0x3a/0xa20 [ 3171.762903] should_failslab+0x5/0x20 [ 3171.763333] kmem_cache_alloc+0x5b/0x310 [ 3171.763801] create_object.isra.0+0x3a/0xa20 [ 3171.764297] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3171.764878] kmem_cache_alloc+0x159/0x310 [ 3171.765357] skb_clone+0x14f/0x3d0 [ 3171.765778] ip_mc_output+0x5e8/0xd50 [ 3171.766218] ? ip_build_and_send_pkt+0x10d0/0x10d0 [ 3171.766776] ip_send_skb+0x339/0x570 [ 3171.767202] udp_send_skb+0x6ec/0x1250 [ 3171.767652] udp_sendmsg+0x1659/0x2220 [ 3171.768104] ? ip_frag_init+0x350/0x350 [ 3171.768554] ? udp_setsockopt+0xc0/0xc0 [ 3171.769021] ? sock_has_perm+0x1ea/0x280 [ 3171.769494] ? __import_iovec+0x458/0x590 [ 3171.769975] ? udp_setsockopt+0xc0/0xc0 [ 3171.770433] inet_sendmsg+0x105/0x140 [ 3171.770869] ? inet_send_prepare+0x540/0x540 [ 3171.771371] __sock_sendmsg+0x13c/0x190 [ 3171.771822] ____sys_sendmsg+0x334/0x870 [ 3171.772289] ? sock_write_iter+0x3d0/0x3d0 [ 3171.772767] ? do_recvmmsg+0x6d0/0x6d0 [ 3171.773218] ? __lock_acquire+0x1657/0x5b00 [ 3171.773721] ___sys_sendmsg+0xf3/0x170 [ 3171.774169] ? sendmsg_copy_msghdr+0x160/0x160 [ 3171.774695] ? __fget_files+0x2cf/0x520 [ 3171.775155] ? lock_acquire+0x197/0x470 [ 3171.775606] ? find_held_lock+0x2c/0x110 [ 3171.776071] ? __might_fault+0xd3/0x180 [ 3171.776527] ? lock_downgrade+0x6d0/0x6d0 [ 3171.777017] __sys_sendmmsg+0x195/0x470 [ 3171.777475] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3171.777979] ? lock_downgrade+0x6d0/0x6d0 [ 3171.778457] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3171.779007] ? wait_for_completion_io+0x270/0x270 [ 3171.779555] ? rcu_read_lock_any_held+0x75/0xa0 [ 3171.780088] ? vfs_write+0x354/0xb10 [ 3171.780513] ? fput_many+0x2f/0x1a0 [ 3171.780930] ? ksys_write+0x1a9/0x260 [ 3171.781369] ? __ia32_sys_read+0xb0/0xb0 [ 3171.781853] __x64_sys_sendmmsg+0x99/0x100 [ 3171.782339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3171.782929] do_syscall_64+0x33/0x40 [ 3171.783352] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3171.783933] RIP: 0033:0x7fcb10dbfb19 [ 3171.784351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3171.786456] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3171.787316] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3171.788118] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3171.788926] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3171.789738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3171.790543] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:11:45 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x8}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:11:45 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0xe2) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000240)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) r4 = accept$inet(r3, 0x0, &(0x7f0000000080)) recvmsg(r4, &(0x7f00000003c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000240)}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/36, 0x24}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000005c0)=""/92, 0x5c}], 0x7, &(0x7f0000001980)=""/133, 0x85}, 0x2000) [ 3171.855215] blktrace: Concurrent blktraces are not allowed on loop14 [ 3171.911776] blktrace: Concurrent blktraces are not allowed on loop6 12:11:56 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x7, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x1, 0x1, 0x1}, 0x5) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) setxattr$incfs_id(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x33}, 0x20, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:11:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0) faccessat2(r0, &(0x7f00000014c0)='./file0\x00', 0x160, 0x300) syz_mount_image$tmpfs(&(0x7f0000001500), &(0x7f0000001540)='./file0/file0\x00', 0x8000, 0xa, &(0x7f0000002b00)=[{&(0x7f0000001580)="382320c101cc073d36ebd7a86bdaf002a54574a02e428174fc0c1f9d2d72b23949d6ba1315841e0c00bcaebd20caf614ad205d7ed6a33ee547ba9320baa844f91b7a875fa190d49a7f67270cb231488b32e7424bfeac3523cc196e77361d0a90e509d46d2c15aa444e79c4c857e968bb29e98c8b00714e0cb49c9288a87d3320e0dab9515d6bcb3d04ef75b8f5ecc1b135dba7872ba871a4892533706d9f5e4db1afd864073b1f00c2acfd5c2a55b7daa118a547233f0b3b2f1e52ce15605eb2df4863d026ae1a7908fc9b59dda0fcfcc10a06e5a6de5e0ca04cb492fb0017c72117750575", 0xe5, 0xccd2}, {&(0x7f0000001680)="a5280debdd14f91df4090aac74b40fee547e0878c284a97715c3d8d8a134d597517046e49606", 0x26, 0x5000000}, {&(0x7f00000016c0)="b2819b6b2bbd289dd5ffd80bd1d077bffe9c89294e26683ef9b78c5ce442b8661ad8eed95ba615147c04f674b4fbaeb6bdc0e2e661f980889010cb36860751dc853deabc580d11f34a56516d06d41683", 0x50, 0x9}, {&(0x7f0000001740)="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", 0x1000, 0x1000}, {&(0x7f0000002740)="0279e8bf6e5c059d5293b15f6ee782a43f902f0fc197edca684d4c1ffab4e1da3bb3b282d9cd316dabd86681b4", 0x2d, 0x4a78}, {&(0x7f0000002780)="6f58d996b78e5eda8dd1a50ea90bf3daf21947a5059c66ae57a9bb2ac54bf65deaefafd8513637f9e2f0d036b38e1aba0bddc800d05d15ac3801d9a97e6b43a357be5539134d139bc281f9bec1bab4ad5fb52155dd15197f42ed44460b6b4c12308c90d9255aedecf6893bfb5c021b5f8bcce5ebae50f1dca138b879a83e0125bd68a1b9c8e125dec5f23b4e935bb38232d8b4ce0a31bad7cd54306d66051ea5dd85105c3cb1e69273c1990515cbdadcf314d42069d8c671fe8e498bc9ee04de31f4088becbd4d1ad75a419c48221a6f9e96dc0d5075da62fe171020f341bb88", 0xe0, 0x8}, {&(0x7f0000002880)="08f3be4b0c720d30eda364e037c3961fcabc28fb5a8e09349392cd6f43e10affac0ab02882c5970c9b9fed48563717d31449fe2165a0d76a05cba540bd181d2b6589ddb31aa230b631a807b3b6b379501ac78ed08f8ff6fed7a3041e8cde93b59c70b8e0548bf2d4ab47fbf0a8aead5a8334cec5d8e80163ff5cca8182a2255816c97137764f4246bb1c9ea9f0929982455f8d8e8319438b4ac614762f25df19eadad50db45ade51ab7571b01203f4631039177dace37e1797655c9cfd5644621da22e", 0xc3, 0x9}, {&(0x7f0000002980)="0ad6850f08b22a2ebef9564421d2dfcf84119acf7fbf24d0c31d5bd8fd2fce235a3f16c63a2b4994c661bdff68398c62abe15df45fd0ef06ad3d5f93af0dab02716376896de0048d0bab", 0x4a, 0xfff}, {&(0x7f0000002a00)="5d4f1c8474d2f539a8f9f7091167462e7eac494a1583c64d911060c0bcbd4084278f44d68e31be90c2a575bd997d04aea59ac16bf6b8ed75b28ffa1e7ff526ae6b95548bcd7910a95cc064aaaf0986d2f3cfc6008d1b15b94c50d244042091a7360d87e755dadc6fe3dcdc5619a370861e09d3afbf849cfdc2469f31abcb77fa26ca9265352fc4411134fd96278e14468c3a", 0x92, 0x4}, {&(0x7f0000002ac0)="9d81a869caaac35f178f269132d53f67972c764c86b27a136fc4a40be775acc0", 0x20, 0x4}], 0x104040, &(0x7f0000002c00)={[{@mode={'mode', 0x3d, 0x7d}}, {@nr_inodes}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x39, 0x38, 0x1c, 0x30]}}], [{@euid_gt={'euid>', 0xee01}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0/file0\x00', 0x5, 0x4, &(0x7f0000001340)=[{&(0x7f0000000240)="8bec5ddde2fef3f08547439e4d857845010ae0300547bba3762f86fb5b1f1f05382be37141cd28985c6322f7f12d9ec602e1cbeabaf80a05898f247bf086be2db61d9c9cc8199555db7ba3f9f58400dbf569728dce5bcbe3cf7f5363582bff2c79b75eed104b64d1fd2ae00f1581ee5d0c45801498ff0feb7a5aebbe8502d487505e0c0a9fc9442232e6c20b81780107bebf56a2c64062ba403624a9fd4e16f41cc8d6099703c3af24d43835c6e4764c42400a4fa04d594a63576cfdb6731b28b9d2e3fedc5fa07c58c8aeee77b9dc4ee0fd626eb7d834982b1bbfc0186d10aa9627fe7acb0cbe3244072ffc659b76", 0xef, 0x6}, {&(0x7f0000000140)="de0b3a73d33688b9dd43aeb7f22d581a05522f6af224307a1d51f2da34c211e37a25d77b00fc8f785b06e83f2f74d9eb42d21ed8a30f4ae44f05b3ff1e30008e8f35b43a424d341024beac4618be2fc419f54599d4149979c8463bc2e4a6217d0f7fd91ecaba8b14ac7f792e4bd63ef316e2a518553a0afa7ae574af9c914b3366b958657468237708b24e1c2fb6aa51", 0x90, 0x2}, {&(0x7f0000000340)="8b4aeb2ee1d14b9b086e28a856bee4b0640b3648da8fb56e4f98df0fcb8919d4c64b3af797e5c2a0f6df8dcec35b06525942d03f83454c280986340fbb865620dd0238ac0a99be812a06b0aabdcba1d6b43652ed9fcdc7c1af0c25ca672dc738452baec5847f9108476b0fcef2b3eaf4c9317d576aa85d8234d43b273670f77bab431408fca2f94ac07389747c135e254148f0ffb98bf04c145b961d2e3a40958adbeadd589f0514e2bdd707f55efc1d92075dca7ee18d43c8014af0fe72684c6bbeeaa93df05546463c14c93354ce87ff69543399a0c7a5156e95c61dbc1840045aae8a5a5f511dfa968d122c14b05929ffb2105721de5f73ccc21d7a5d6695c23d0b941906eaafb4579a951db684796fb80109cb7e9a64305d4aa44c50b468b13f009fbb675d113a32675e622fe244d3f3c4f15585f50d04c7dcb7afd3708841b74f16c097dd4c38f5018efa7a0c59f5645296b8153987c64d39966cc84d19d8bcf5114442940723694d5cee112b164e3948779b8e1695cbf68fe406277ace6a1674bd62ba49abdc7e37929333266a96d3fde6ecfb7f59ea3dcb52226a8b17019029ee622742c881ac86b2ddee52ada6357111dbd26a12d31501de37f1c397934800690a610b1e21d33bbdc434fb212aaf6ca19b6b496f4c986c7fbb588548a5505b2e685cb1aa1f3b4510c7194b909b0a42eebace383c5fccb565b53c5f94a92fb2b22f88216ceea981fd5fc89176b980ea51acd735afc8aa9c346a314ffd42b6f4c3ed72a01874af36686f07dbc81530b92feb91a650271cd880b49c39dcbeb867748ee7d02974bd20422b17f6e791f3066b4676422e5c3ded3b22ed2b97a4e093346804b041f6eff68f555079b1250e05cfa1f9b1e3a0027818e507e5f1628931df5c5d2e0d7458c5523f0d79d4113b55f703aee25332108df319ea54046ccf800880aa7daa5f9ae7881ec3413f4e547ec8bb29e9f2d5a777eddfa42797d855faf6916ddab27de3e3f49122e68dc911a06b1168e33ff25dfb712ebbb0a7653eb7694495b50ae3d50ce893197dc691955014ba58a8c605b558734a07afd66c85e89a8dc0e31bfa37d4aac3b159f29c07f93193bccce96d399a806fc714fc35a4292742021d7bebdd73d08838b94e6696e98d63b417b5860a7653248748e023c4ba138e3caea1e7b42e059565f663db71c9bf956c4644f536da9a9f92adb8259c881f723026f786f7d30bf1a7679b50a5e95eb30268e19e409342e009b92af125aec037fe0bec160861db48c84cb8e5277b8664526b32d5500f7526b096bb8b6052168fe0fb1a48339f886d25434968bf65391db93243f7993154516bdd1afc4366c20b4f310d5b220366ff0aba76d121cc9684a702a6a90cc7ea1b0bf051a43ece02255b13c0bd2af08ea55525477a6325a465c4ee9f47af282e531e317f57ba83b23cfd202a738c6735629db4550bde97c36df8d2b730fc150c9c8749ed3a9c7004929fdaeebda9f75eb56be83faba245c5928b726a14575c2f280d815e9fc2c551e9155f37f1cb1a3e6d6f18e3eb66b275e2c6790e6d9c19e342f5faa0928e23f847b7d834ee77333962300867390fee35f6a8dfefa1222b3d3c41a5a9514469d7d1531bdd91d5a8024abcd2ce5baa549951de4e3208ef89167882a40b714c9b096d357bdff0f5923b8d1c9827af91cc988dd10f5758366fc27699bde72afcf4cd3dcefa2932ed2986a4cb1c0228011307bcbd33d110d43ae96ee4fc1cff020028f4b3b576ff6f5f07f795df028dfa35d1b107ae46d04b1d0978f9599216fb6ba54fe26e4e3a2e3846f1945e80d4d5833fdc25eff5d2eb7947d989348daa05d4283148aa4f9a13f0a62e821512fedb07826c76decc4bb81b261965124e7e630b8a5a489655402040ef48a6d413f4f0d77fa992dc65ed493e65451c468469d3014035c6e174454247dd959ce796a78cbfb7b513a0466d88f7a301772c3e0b633631371424cbcc15f3b476f6900b403ad1cd8ce809a1e70829cd8a929cf59316bee2d6007f35e737f51e7b6fe5807c3a0c3175b37a7116cb9031cd3ad5bdc437b13fc9b3c9954f2b416169dd340d8d145ba8d0a6b0996ac62f098f5df50d27d7c14b05c7a94ada72af83b1bb9ce1447a89657a5fe58bc70ee485b78d516b62df10c5b2ac22f67970d38a2fbc42c2527c34895e812665e86c8289b1ceae5ac33b988f8f0d334a17d551795194ff06ae769c59d033ee545c62fd0cb11fd4b950cdde2ddd80369cf73b47c07b3fad8db1a308714e49e7dd04684f930e7a262cce78a3137ccabd4ff1557ea102fa72516300976e38077d12705b4ee365de8a2233179052568f015eef65e6ac0feab6d8e05128c9bca97e382328441bc2f85430ce058cbbe2ec20fa6d0246973da275875b458ba0a9500fedd2011b3714760f780e9f3353e84ee868e84a04f262d6a10eccb36ca8e7a9a26ab87b697ea30e868551f6eb2cfbeb84416f12c97ac5612c50b87b70132954f9b13a6388270555c60e2ddf83f69bf63fd6805a4a71a150b500fd2f789d96c2047a2de8324a24eca46cbf474a715859ab585211f32755ced0d75bd742544cc3df431e52bfc05d4db1fe09af9f900c86aaedc3bb6af5a2912161b3869f8f348cc607e81445bfb9d5d2c4881d495754bc98220c3cae41286cfafa0251b77f396cc08f3a6b9c582a37881c573729c8b7e357182561017d667af188fd3b9afdc8355c4c160a8bff122138343cecdb831152febe5963188dc2970b4821a585364dbe510d44ac688bb48327df5a5c85c0678bc4552f19dfb0d4fb0cb604ce57e867899556f0e0ed066a8f14ac7203e4a4bc0b746f80ac2fe074331ac7c023c37815058d6b4999df530c6257bf67765e4713a98ae1e92f820496ebd543483a10f9aa156855a1118c18ac770d7937ae6e42505f5854a66e4a9b2758fa31801af01a1809f2151f821a82854adbf8ae1d23481bf50dbab5ced6707bfa2ff57892151af0f21172fca8412282f3fc8441c44b523c57834077bc9f747cfc982540bca7a7d97a21808e8fc65f0fd7c7be369ae1468d6cb6d8658ce4eded293d3793f391f9fca537b37b236eb39c3a344156dc68777effd254885dcb063fbfafead8445d2accf9300226a8f72607e8c3d9c0c4b802000a0e4262c34d6a8526d48adff1cbbec7e49d34b07efc448f5e1e40ce9520ad7869e785bbd78cfdf02168f4fe9acda14d3b439798c4c7f2d8c864e8cc4cdea6643500fa6e8f311df682e9b205f217089722965ce20467967aa663e4e37b8df947927e509fa603eeef4e86da2da45656ebf3ca11cf10eceda9aedd4c286c46ec069c4a6228e8fce0e4b19b94741f304c9d15a7471d3ef6dcc642085cd5fc88b01030c892cd4719e37238f3f9b4ba61e21441d1b029a906c3612069576d8a2e000184d3749181b61b2de0af239579ee2d096dafd52b244c413b9f2847e633849d80a793fa6fe5181044bd9ce8c7f56c9d034507ba68cd1d85dc12833708219cb1e7641c3c3fd5e91f9301e3c52b7843f26ec19a48aefe1b77a20e432bc209ba82a21ffdc396b1fb63bf80e71c7b6893e9e3d5b6fe9046d69e1e2956a4e1d91ddff44cfa9cfab0528a89e411858d52822c65b64244a6d61be5a01d61440f8bb27e935c77c676c1b53b92875d68b33a64f582dde86f308dac6e7d03faf8de114813615f634abdfff06120c4759d6febe45cf1930794fb083c08423c71020ad36744f528f69077a0428dc79c865196e6f533c678856aa3595fc65a80b22ba822fcb2426d95781e73452d1b5c51e9725da44609f499f2f6ac043c6609d95e40b8c10a23172765a40195c83c6a94a0d9fb4d7590911990a2b0079b044042deac1247a8f486857e76074299817537c4f4b0c9752c09e4abcc0534f9f75ac0195f0cbfd05e2599ffd492ec09a1e045d71f5402b627d9d278e60464979ef4c13df8e4e011e9b5293e5c5b4d165ecd132ee93e04e9d8244f2144f2d759724dbed2494654833673f9a407f341a10c74a84036da497a63319028447306449ab1c72bfed3e8dc5e6962a446bd8a9d8fe5f8f993acb2954ea4f7fb0f85f1c92a85ac41ea4e924991f18d76242d25328a2cee76f422dbfe678c84d995de36bd332b816acc24df3dc545c92510a7484e14e15bdfd0fe78e7a60c7e64890b60efdbf9a87a56b849abe25456c2dbf28de9ed019d4d7e71055f20cb5f45a39add5b0a44c76a9c62ac5ea55923e6d7bc937ad4f83af6980df55ceac637ae287dcaa4baeacca44e22b0cafaff7d762d832162daa67e55924e3ac93d0efbc42321d428a8c9272b0aa4f2835dbbd4425eff14a9553bdc89326482e456f070910b7ae02928e2051c5086f0eb4ef5618ef62e116a5b5612e94a8d39c244d0bca7a2236be3af50a06b4af05cec9960f427d940d6c5c481cd439491bdcbb11468f2ea1d5ca9c6e58ad9d2b08ba6e24841f2ab610f7aad3b0b3a936d7af7ffd335344c3f12c550eb71fe02a7a16f5adf52fb9a4a1ac944909434a53019611aaeb4fab2bd15c6520fd939f01812da4709573c647a6c81b3509618653a143a3eeae852ca17facf255f04a821e5b5fb87175cd6e5e627a4f891955e50929572d72ac3c6403783eefa8623e21994c037ca7f3f55216daae6000cd43e02f369babe94f2732331bf876cb305be0e54585ee065749fc5b9e910933d69002758198214774b77f2669b19ea9819889c7a0d776bdb6ee7994e14629f5fa6f9cc19fb1cf433a02d942b2709c51c7072f60a5e97e8ddd0913a8f2c0cc4f427c0bf4ca784c56cd9db2b3ed775b986bec62875a3a681db52c44d3733ba77d9147418d79a64cb316a86e482bb82c76b0e5481e8f0b16bf9783d288ee01f3af82ca7d84c2104a1eb07966ea18fb47a0cbc92078d0d78cb7c53fab73d5aa4ab4b086ce5a3ae607f3f0467c1554396065f928166f884a62ccc600c7fef4985fc14d6f9cafce41d870cf0f1b51ca35bd079fb62832fcf5bb8a150d46d888697cf5665f4e1927c664349e4c860825c86dfa9862af74b9e4b0e1556cd66b01bad890a01833014b4792940aa1739a214f4555aa70663d4b6bedb375e223486e06f11248eb19591d7f73ea28a976464f2ce4d6b04f51c7ce4f51c71aacdb1b58e02b0437203c131d39ca6e3a2f4b20fb7d5d5eb203264b1d0053f9aae38db40e72db09510f12aab59f996f16c5e3e2e615c9d7cf564fa08c2e9592dbf60b4f6ed17d9da5559e2baab358228a01a609372906fdb6476983438bb659513e0d64466543548505124c559bf8c336e3d1813e7208a3624db1d714990a9c031afc9d1d0f1d2129a26eee1f084796200ad4b92b599716d12d8a16c6c3ffcd9078b3cd0e5e7eb64ada0939d91e9096c9b0391834ed8a6a88f550cf36cc46f9b854842cd040fd776c1ec650c86dd36f66720e5617f410c8eb22268e60f3b9085168ffd61470c85ebb9f898f8478ee99efe9e5ab774dbf63506a84656c8a2777df7ac040f4af3da21aa06e88536a2890fe5cdff703dfab5b50180581a8fb4011a8267ad9c204a123fec488a7e33e47c8b11a19e7659d1c5c91eac6b3722c4d505d806ac529100bc4376c27ef625b61cf95a548bdcffb233494d4c634052931352badbaa8c9f3685979b23c340b9fe273f713e1faeba20daf40e78c6c76bda9adff8bc754cce5efa9eab3db2b7d515c1134715328554985ce0661c0fde935c7df19f283b2cb1ef929d15eb24c3700d2a0470752ccc8460f4a8f7b5", 0x1000, 0x3ff}, {&(0x7f00000000c0)="ec28fa23af1575f8bb54eb037302479d86630b6f6af728e4e9b2b2a99702e70f2ee67c56e3877d1f4c0397478177ccaca1bc1885804d3c286853ff2f39726c27", 0x40}], 0x220000, &(0x7f00000013c0)={[{@usrquota}, {@nomblk_io_submit}, {@nomblk_io_submit}], [{@measure}, {@pcr={'pcr', 0x3d, 0xb}}, {@pcr={'pcr', 0x3d, 0x24}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) 12:11:56 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x0) 12:11:56 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x100000000000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:11:56 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:11:56 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x9}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:11:56 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:11:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 88) [ 3182.660901] FAULT_INJECTION: forcing a failure. [ 3182.660901] name failslab, interval 1, probability 0, space 0, times 0 [ 3182.662332] CPU: 1 PID: 15533 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3182.663143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3182.664113] Call Trace: [ 3182.664434] dump_stack+0x107/0x167 [ 3182.664862] should_fail.cold+0x5/0xa [ 3182.665308] ? dst_alloc+0x9e/0x5d0 [ 3182.665739] should_failslab+0x5/0x20 [ 3182.666192] kmem_cache_alloc+0x5b/0x310 [ 3182.666667] dst_alloc+0x9e/0x5d0 [ 3182.667074] rt_dst_clone+0x59/0x870 [ 3182.667510] ip_mc_finish_output+0x95/0x280 [ 3182.668012] ip_mc_output+0x962/0xd50 [ 3182.668458] ? ip_build_and_send_pkt+0x10d0/0x10d0 [ 3182.669028] ip_send_skb+0x339/0x570 [ 3182.669464] udp_send_skb+0x6ec/0x1250 [ 3182.669927] udp_sendmsg+0x1659/0x2220 [ 3182.670382] ? ip_frag_init+0x350/0x350 [ 3182.670860] ? udp_setsockopt+0xc0/0xc0 [ 3182.671335] ? sock_has_perm+0x1ea/0x280 [ 3182.671832] ? __import_iovec+0x458/0x590 [ 3182.672311] ? udp_setsockopt+0xc0/0xc0 [ 3182.672779] inet_sendmsg+0x105/0x140 [ 3182.673226] ? inet_send_prepare+0x540/0x540 [ 3182.673737] __sock_sendmsg+0x13c/0x190 [ 3182.674211] ____sys_sendmsg+0x334/0x870 [ 3182.674693] ? sock_write_iter+0x3d0/0x3d0 [ 3182.675191] ? do_recvmmsg+0x6d0/0x6d0 [ 3182.675649] ? __lock_acquire+0x1657/0x5b00 [ 3182.676162] ___sys_sendmsg+0xf3/0x170 [ 3182.676620] ? sendmsg_copy_msghdr+0x160/0x160 [ 3182.677156] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3182.677767] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3182.678296] ? trace_hardirqs_on+0x5b/0x180 [ 3182.678798] ? lock_acquire+0x197/0x470 [ 3182.679256] ? find_held_lock+0x2c/0x110 [ 3182.679733] ? __might_fault+0xd3/0x180 [ 3182.680192] ? lock_downgrade+0x6d0/0x6d0 [ 3182.680683] __sys_sendmmsg+0x195/0x470 [ 3182.681147] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3182.681647] ? lock_downgrade+0x6d0/0x6d0 [ 3182.682147] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3182.682706] ? wait_for_completion_io+0x270/0x270 [ 3182.683269] ? rcu_read_lock_any_held+0x75/0xa0 [ 3182.683814] ? vfs_write+0x354/0xb10 [ 3182.684251] ? fput_many+0x2f/0x1a0 [ 3182.684673] ? ksys_write+0x1a9/0x260 [ 3182.685114] ? __ia32_sys_read+0xb0/0xb0 [ 3182.685588] __x64_sys_sendmmsg+0x99/0x100 [ 3182.686094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3182.686697] do_syscall_64+0x33/0x40 [ 3182.687132] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3182.687723] RIP: 0033:0x7fcb10dbfb19 [ 3182.688154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3182.690297] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3182.691177] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3182.692000] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3182.692824] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3182.693653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3182.694495] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3182.695620] loop1: detected capacity change from 0 to 512 [ 3182.700534] EXT4-fs (loop1): unable to read superblock [ 3182.700547] blktrace: Concurrent blktraces are not allowed on loop14 [ 3182.723088] blktrace: Concurrent blktraces are not allowed on loop6 12:11:56 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3182.788978] loop1: detected capacity change from 0 to 135266304 12:11:56 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:11:57 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xa}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 3182.847012] loop1: detected capacity change from 0 to 4608 12:11:57 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:11:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 89) 12:11:57 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3182.907779] blktrace: Concurrent blktraces are not allowed on loop6 [ 3182.917414] blktrace: Concurrent blktraces are not allowed on loop4 12:11:57 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x200000000000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:11:57 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3182.979519] blktrace: Concurrent blktraces are not allowed on loop4 [ 3182.999377] FAULT_INJECTION: forcing a failure. [ 3182.999377] name failslab, interval 1, probability 0, space 0, times 0 [ 3183.001875] CPU: 0 PID: 15570 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3183.003311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3183.005036] Call Trace: [ 3183.005593] dump_stack+0x107/0x167 [ 3183.006370] should_fail.cold+0x5/0xa [ 3183.007165] ? create_object.isra.0+0x3a/0xa20 [ 3183.008117] should_failslab+0x5/0x20 [ 3183.008919] kmem_cache_alloc+0x5b/0x310 12:11:57 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x0) [ 3183.009764] create_object.isra.0+0x3a/0xa20 [ 3183.010912] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3183.011371] blktrace: Concurrent blktraces are not allowed on loop14 [ 3183.012014] kmem_cache_alloc+0x159/0x310 [ 3183.013637] dst_alloc+0x9e/0x5d0 [ 3183.014398] rt_dst_clone+0x59/0x870 [ 3183.015201] ip_mc_finish_output+0x95/0x280 [ 3183.016134] ip_mc_output+0x962/0xd50 [ 3183.016956] ? ip_build_and_send_pkt+0x10d0/0x10d0 [ 3183.018014] ip_send_skb+0x339/0x570 [ 3183.018817] udp_send_skb+0x6ec/0x1250 [ 3183.019658] udp_sendmsg+0x1659/0x2220 [ 3183.020495] ? ip_frag_init+0x350/0x350 [ 3183.021353] ? udp_setsockopt+0xc0/0xc0 [ 3183.022234] ? sock_has_perm+0x1ea/0x280 [ 3183.023130] ? __import_iovec+0x458/0x590 [ 3183.024018] ? udp_setsockopt+0xc0/0xc0 [ 3183.024872] inet_sendmsg+0x105/0x140 [ 3183.025692] ? inet_send_prepare+0x540/0x540 [ 3183.026643] __sock_sendmsg+0x13c/0x190 [ 3183.027500] ____sys_sendmsg+0x334/0x870 [ 3183.028377] ? sock_write_iter+0x3d0/0x3d0 [ 3183.029279] ? do_recvmmsg+0x6d0/0x6d0 [ 3183.030121] ? __lock_acquire+0x1657/0x5b00 [ 3183.031050] ___sys_sendmsg+0xf3/0x170 [ 3183.031884] ? sendmsg_copy_msghdr+0x160/0x160 [ 3183.032861] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3183.033981] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3183.034937] ? trace_hardirqs_on+0x5b/0x180 [ 3183.035866] ? lock_acquire+0x197/0x470 [ 3183.036711] ? find_held_lock+0x2c/0x110 [ 3183.037585] ? __might_fault+0xd3/0x180 12:11:57 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0x806cad}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0, 0x2160, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f00000009c0)={0x0, 0x0}) pidfd_open(r6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x100000001) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x1, 0x3f, 0x7d, 0x5, 0x0, 0xa62, 0xa300, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x0, @perf_config_ext={0x3eb, 0xb9}, 0x10, 0x0, 0x470, 0x6, 0x62, 0x7fff, 0x2, 0x0, 0x2, 0x0, 0x2}, r6, 0x0, r7, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) [ 3183.038566] ? lock_downgrade+0x6d0/0x6d0 [ 3183.039449] __sys_sendmmsg+0x195/0x470 [ 3183.040303] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3183.041262] ? lock_downgrade+0x6d0/0x6d0 [ 3183.042172] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3183.043215] ? wait_for_completion_io+0x270/0x270 [ 3183.044247] ? rcu_read_lock_any_held+0x75/0xa0 [ 3183.045244] ? vfs_write+0x354/0xb10 [ 3183.046052] ? fput_many+0x2f/0x1a0 [ 3183.046832] ? ksys_write+0x1a9/0x260 [ 3183.047646] ? __ia32_sys_read+0xb0/0xb0 [ 3183.048520] __x64_sys_sendmmsg+0x99/0x100 [ 3183.049427] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3183.050535] do_syscall_64+0x33/0x40 [ 3183.050559] blktrace: Concurrent blktraces are not allowed on loop14 [ 3183.051328] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3183.051350] RIP: 0033:0x7fcb10dbfb19 [ 3183.054021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3183.057974] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3183.059600] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3183.061126] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3183.062660] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3183.064182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3183.065703] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3183.169736] loop1: detected capacity change from 0 to 512 [ 3183.178705] EXT4-fs (loop1): unable to read superblock 12:12:11 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:12:11 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:12:11 executing program 1: ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) 12:12:11 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x0) 12:12:11 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x1000}}, './file0\x00'}) 12:12:11 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x300000000000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:12:11 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 90) 12:12:11 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3196.908483] loop1: detected capacity change from 0 to 512 [ 3196.910202] blktrace: Concurrent blktraces are not allowed on loop6 [ 3196.911805] FAULT_INJECTION: forcing a failure. [ 3196.911805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3196.911821] CPU: 0 PID: 15606 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3196.911828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3196.911832] Call Trace: [ 3196.911851] dump_stack+0x107/0x167 [ 3196.911864] should_fail.cold+0x5/0xa [ 3196.911891] _copy_from_user+0x2e/0x1b0 [ 3196.918071] __copy_msghdr_from_user+0x91/0x4b0 [ 3196.918618] ? __ia32_sys_shutdown+0x80/0x80 [ 3196.919128] ? udp_setsockopt+0xc0/0xc0 [ 3196.919593] ? inet_sendmsg+0xbd/0x140 [ 3196.920049] ? inet_send_prepare+0x540/0x540 [ 3196.920561] ? __sock_sendmsg+0x55/0x190 [ 3196.921035] sendmsg_copy_msghdr+0xa1/0x160 [ 3196.921535] ? do_recvmmsg+0x6d0/0x6d0 [ 3196.922028] ? __lock_acquire+0x1657/0x5b00 [ 3196.922535] ___sys_sendmsg+0xc6/0x170 [ 3196.922992] ? sendmsg_copy_msghdr+0x160/0x160 [ 3196.923527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3196.924149] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3196.924523] blktrace: Concurrent blktraces are not allowed on loop4 [ 3196.924678] ? trace_hardirqs_on+0x5b/0x180 [ 3196.924699] ? lock_acquire+0x197/0x470 [ 3196.927219] ? find_held_lock+0x2c/0x110 [ 3196.927695] ? __might_fault+0xd3/0x180 [ 3196.928156] ? lock_downgrade+0x6d0/0x6d0 [ 3196.928647] __sys_sendmmsg+0x195/0x470 [ 3196.929117] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3196.929616] ? lock_downgrade+0x6d0/0x6d0 [ 3196.930125] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3196.930691] ? wait_for_completion_io+0x270/0x270 [ 3196.931254] ? rcu_read_lock_any_held+0x75/0xa0 [ 3196.931373] EXT4-fs (loop1): unable to read superblock [ 3196.931793] ? vfs_write+0x354/0xb10 [ 3196.931812] ? fput_many+0x2f/0x1a0 [ 3196.933882] ? ksys_write+0x1a9/0x260 [ 3196.934339] ? __ia32_sys_read+0xb0/0xb0 [ 3196.934819] __x64_sys_sendmmsg+0x99/0x100 [ 3196.935309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3196.935901] do_syscall_64+0x33/0x40 [ 3196.936337] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3196.936930] RIP: 0033:0x7fcb10dbfb19 [ 3196.937368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3196.939493] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3196.940365] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3196.941182] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3196.942015] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3196.942834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3196.943651] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3196.954783] blktrace: Concurrent blktraces are not allowed on loop12 [ 3196.962691] blktrace: Concurrent blktraces are not allowed on loop14 [ 3197.024849] blktrace: Concurrent blktraces are not allowed on loop14 12:12:21 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:12:21 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x0, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:12:21 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300), 0x0, 0x0) 12:12:21 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/140, 0x8c}, {&(0x7f0000000240)=""/51, 0x33}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000340)=""/101, 0x65}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) r2 = syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000005c0)={0xff, 0x30, '\x00', 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 12:12:21 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xc}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:12:21 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000061c0)={0x0, 0x0, &(0x7f0000006180)={&(0x7f0000006100)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8008090) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000061c0)={0x0, 0x0, &(0x7f0000006180)={&(0x7f0000006100)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40100020}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x24008800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) 12:12:21 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x400000000000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:12:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 91) [ 3207.772548] loop1: detected capacity change from 0 to 512 [ 3207.781565] blktrace: Concurrent blktraces are not allowed on loop6 [ 3207.783912] blktrace: Concurrent blktraces are not allowed on loop14 [ 3207.794747] EXT4-fs (loop1): unable to read superblock [ 3207.801872] FAULT_INJECTION: forcing a failure. [ 3207.801872] name failslab, interval 1, probability 0, space 0, times 0 [ 3207.804792] CPU: 0 PID: 15620 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3207.806551] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3207.807121] blktrace: Concurrent blktraces are not allowed on loop14 [ 3207.808308] Call Trace: [ 3207.808336] dump_stack+0x107/0x167 [ 3207.808359] should_fail.cold+0x5/0xa [ 3207.811177] ? create_object.isra.0+0x3a/0xa20 [ 3207.812136] should_failslab+0x5/0x20 [ 3207.812938] kmem_cache_alloc+0x5b/0x310 [ 3207.813801] create_object.isra.0+0x3a/0xa20 [ 3207.814734] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3207.815798] kmem_cache_alloc+0x159/0x310 [ 3207.816675] dst_alloc+0x9e/0x5d0 [ 3207.817412] rt_dst_clone+0x59/0x870 [ 3207.818202] ip_mc_finish_output+0x95/0x280 [ 3207.819105] ip_mc_output+0x962/0xd50 [ 3207.819905] ? ip_build_and_send_pkt+0x10d0/0x10d0 [ 3207.820927] ip_send_skb+0x339/0x570 [ 3207.821706] udp_send_skb+0x6ec/0x1250 [ 3207.822538] udp_sendmsg+0x1659/0x2220 [ 3207.823354] ? ip_frag_init+0x350/0x350 [ 3207.824190] ? udp_setsockopt+0xc0/0xc0 [ 3207.825042] ? sock_has_perm+0x1ea/0x280 [ 3207.825913] ? __import_iovec+0x458/0x590 [ 3207.826776] ? udp_setsockopt+0xc0/0xc0 [ 3207.827615] inet_sendmsg+0x105/0x140 [ 3207.828410] ? inet_send_prepare+0x540/0x540 [ 3207.829337] __sock_sendmsg+0x13c/0x190 [ 3207.830177] ____sys_sendmsg+0x334/0x870 [ 3207.831031] ? sock_write_iter+0x3d0/0x3d0 [ 3207.831913] ? do_recvmmsg+0x6d0/0x6d0 [ 3207.832729] ? __lock_acquire+0x1657/0x5b00 [ 3207.833642] ___sys_sendmsg+0xf3/0x170 [ 3207.834466] ? sendmsg_copy_msghdr+0x160/0x160 [ 3207.835420] ? __fget_files+0x2cf/0x520 [ 3207.836254] ? lock_acquire+0x197/0x470 [ 3207.837079] ? find_held_lock+0x2c/0x110 [ 3207.837928] ? __might_fault+0xd3/0x180 [ 3207.838766] ? lock_downgrade+0x6d0/0x6d0 [ 3207.839638] __sys_sendmmsg+0x195/0x470 [ 3207.840468] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3207.841366] ? lock_downgrade+0x6d0/0x6d0 [ 3207.842252] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3207.843256] ? wait_for_completion_io+0x270/0x270 [ 3207.844266] ? rcu_read_lock_any_held+0x75/0xa0 [ 3207.845242] ? vfs_write+0x354/0xb10 [ 3207.846015] ? fput_many+0x2f/0x1a0 [ 3207.846784] ? ksys_write+0x1a9/0x260 [ 3207.847584] ? __ia32_sys_read+0xb0/0xb0 [ 3207.848436] __x64_sys_sendmmsg+0x99/0x100 [ 3207.849321] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3207.850411] do_syscall_64+0x33/0x40 [ 3207.851195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3207.852262] RIP: 0033:0x7fcb10dbfb19 [ 3207.853046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3207.856905] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3207.858508] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3207.860000] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3207.861488] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3207.862986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3207.864471] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3207.903883] blktrace: Concurrent blktraces are not allowed on loop14 12:12:22 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xd}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:12:22 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x500000000000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3207.910500] blktrace: Concurrent blktraces are not allowed on loop6 12:12:22 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x0, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:12:22 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) r2 = syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000180)={0x87, 0x29, 0x1, {0x4, [{{0x10, 0x4}, 0xea1, 0x81, 0x7, './file0'}, {{0x10, 0x0, 0x8}, 0x8, 0xc0, 0x7, './file0'}, {{0x4, 0x3, 0x4}, 0x7, 0xf7, 0x7, './file0'}, {{0x0, 0x2, 0x6}, 0x401, 0x0, 0x7, './file0'}]}}, 0x87) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) io_uring_enter(r2, 0x4133, 0x4ee5, 0x1, &(0x7f0000000240)={[0x5]}, 0x8) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:12:22 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:12:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xaaaab1d, &(0x7f00000000c0)=[{0x0, 0x0, 0x101}, {&(0x7f0000000140)="954f18fa8859b23ae900b8a635b52b298e5d22b639e5139419466da2db3cdff4a31fa86ec87481552f447c616b533de4771811d6045706bd7c627a73b4257feba1492777372a4f1ed1649305c538db", 0x4f, 0x7}], 0x0, &(0x7f0000000040)=ANY=[]) [ 3207.986543] blktrace: Concurrent blktraces are not allowed on loop14 12:12:22 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xe}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:12:22 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x600000000000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:12:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 92) 12:12:22 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x0, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3208.116286] blktrace: Concurrent blktraces are not allowed on loop6 12:12:22 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300), 0x0, 0x0) 12:12:22 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3208.151947] blktrace: Concurrent blktraces are not allowed on loop14 [ 3208.169671] FAULT_INJECTION: forcing a failure. [ 3208.169671] name failslab, interval 1, probability 0, space 0, times 0 [ 3208.171081] CPU: 1 PID: 15668 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3208.171877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3208.172825] Call Trace: [ 3208.173129] dump_stack+0x107/0x167 [ 3208.173550] should_fail.cold+0x5/0xa [ 3208.173985] ? dst_alloc+0x9e/0x5d0 [ 3208.174415] should_failslab+0x5/0x20 [ 3208.174850] kmem_cache_alloc+0x5b/0x310 [ 3208.175319] dst_alloc+0x9e/0x5d0 [ 3208.175722] ? trace_hardirqs_on+0x5b/0x180 [ 3208.176219] rt_dst_alloc+0x73/0x440 [ 3208.176650] ip_route_output_key_hash_rcu+0x98d/0x25b0 [ 3208.177268] ip_route_output_key_hash+0x185/0x340 [ 3208.177825] ? ip_route_output_key_hash_rcu+0x25b0/0x25b0 [ 3208.178471] ? lock_downgrade+0x6d0/0x6d0 [ 3208.178950] ip_route_output_flow+0x23/0x150 [ 3208.179457] udp_sendmsg+0x190d/0x2220 [ 3208.179903] ? ip_frag_init+0x350/0x350 [ 3208.180360] ? udp_setsockopt+0xc0/0xc0 [ 3208.180823] ? sock_has_perm+0x1ea/0x280 [ 3208.181288] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3208.181889] ? __import_iovec+0x458/0x590 [ 3208.182371] ? udp_setsockopt+0xc0/0xc0 [ 3208.182825] inet_sendmsg+0x105/0x140 [ 3208.183263] ? inet_send_prepare+0x540/0x540 [ 3208.183766] __sock_sendmsg+0x13c/0x190 [ 3208.184220] ____sys_sendmsg+0x334/0x870 [ 3208.184687] ? sock_write_iter+0x3d0/0x3d0 [ 3208.185170] ? do_recvmmsg+0x6d0/0x6d0 [ 3208.185618] ? __lock_acquire+0x1657/0x5b00 [ 3208.186128] ___sys_sendmsg+0xf3/0x170 [ 3208.186582] ? sendmsg_copy_msghdr+0x160/0x160 [ 3208.187112] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3208.187720] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3208.188233] ? trace_hardirqs_on+0x5b/0x180 [ 3208.188732] ? lock_acquire+0x197/0x470 [ 3208.189186] ? find_held_lock+0x2c/0x110 [ 3208.189653] ? __might_fault+0xd3/0x180 [ 3208.190118] ? lock_downgrade+0x6d0/0x6d0 [ 3208.190604] __sys_sendmmsg+0x195/0x470 [ 3208.191066] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3208.191562] ? lock_downgrade+0x6d0/0x6d0 [ 3208.191754] blktrace: Concurrent blktraces are not allowed on loop14 [ 3208.192050] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3208.193968] ? wait_for_completion_io+0x270/0x270 [ 3208.194529] ? rcu_read_lock_any_held+0x75/0xa0 [ 3208.195063] ? vfs_write+0x354/0xb10 [ 3208.195489] ? fput_many+0x2f/0x1a0 [ 3208.195907] ? ksys_write+0x1a9/0x260 [ 3208.196342] ? __ia32_sys_read+0xb0/0xb0 [ 3208.196807] __x64_sys_sendmmsg+0x99/0x100 [ 3208.197288] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3208.197873] do_syscall_64+0x33/0x40 [ 3208.198312] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3208.198898] RIP: 0033:0x7fcb10dbfb19 [ 3208.199327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3208.201669] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3208.202557] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3208.203370] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3208.204284] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3208.205172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3208.206214] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:12:22 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) r3 = syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:12:22 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xf}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:12:22 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3208.267004] blktrace: Concurrent blktraces are not allowed on loop6 12:12:22 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3221.034946] loop1: detected capacity change from 0 to 512 12:12:35 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'L-', 0x8}, 0x16, 0x1) r1 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000240)="2da60501c679d9b589c7b9536f29bc663b52d130862d00ddb675dfca9329546071126fa393e1c40fa362e7a8aeda4b037f951aedfe65c3199cd25bddb9c0c889c88954835288757e0c3d7a97ac5d98e120d6fafd029e359062505a631bf61cfe5c18bd396484a62c4a07e0804da11a9ebea782086ad1208b2f10b01fc9980b599efb7759d0db4260487b8144ee64c44266c3248e9ded9fdd856f5792a2b1e2d5b2419cab7fd10b1de5066f6d08e972f572ec1f87bb704696e84ac7a98a87f967cad7a2b7e33bf3e8b7be8445e3e4315f64c04dcd278ad1189b", 0xd9, 0xfffffffffffffffc}, {&(0x7f0000000340)="fb65b207d0ef052a9119b8450db8f6c7898c5390bed1f72222fd75c13901577161ad31d6fa2c11661471f110bb182b72ba6bae0e96eb0e3e8026f2fcbefa71d2bfa2f9310ce6f48758955afa91c87a6259ecb958bc1329b1716b0366b4b3bdc2060ed9db68da9ba6dfd6d8f531bb169a5ebe", 0x72, 0x5}, {&(0x7f00000003c0)="480a990e8a19f543cfbcd5f9992bc5b1c014d50ec00ff468fa5be7896e3f7031ec580a77cec7c808f1012320f4788d9128f4197698b87a52343630ecdacd9e7bfb906e9edc0cc7257d", 0x49, 0xd28}, {&(0x7f00000001c0), 0x0, 0x7f}, {&(0x7f0000000440)="21a06cfd00f7c6ba245cf62b93553ce699d4f30a00008f9d1b12ae38797ef3c23097075f2c4cba643a61a3e121b920656f4931ac62f3ef149674ebec6e1ad787bc914f510851e2952b895b5b8f528b6b11c259df8a07d73426e1d623daa9527130208d5ffbe89f93f85267357009b1d8af6da7799a8ff5506d39b709cb24278894227a63b9fedc36bf8aac3959f47e3058d54d41e8826a6cb4207ef2a46ae6bd0355587fc860a8600be9bc9f60844e84016efda69db8335575c66bc77456e9d5d750a0a47b543e296f3121640c8d3dac", 0xd0, 0x80000001}, {&(0x7f0000000540)="4e5de3f6ef67e639904be86fe2b4e1ff6142ced586bfa56be60a1812a8ed077ffde3c12380e269319c86d7607c4a7c15b89b084022db2afc6ba84d7d4d98e159e3047833fd265c71c9e5a32ac9989af7ba0e259249593622781289a41ab17ea7a124c86fbea6c043f4b8883e05a4d1e948b68798eeebe2a5a197", 0x7a, 0x1f}], 0x200004, &(0x7f0000000680)={[{@fat=@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@permit_directio}, {@fowner_lt={'fowner<', 0xee00}}, {@pcr={'pcr', 0x3d, 0xd}}, {@fowner_lt={'fowner<', 0xee01}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_lt={'fowner<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfsdef={'smackfsdef', 0x3d, ')'}}, {@fsname={'fsname', 0x3d, '}'}}]}) futimesat(r1, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={{0x77359400}, {0x0, 0x2710}}) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x182c2, 0x160) 12:12:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 93) 12:12:35 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x700000000000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:12:35 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x10}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:12:35 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x14, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) syz_io_uring_setup(0x4d51, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xd) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:12:35 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:12:35 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300), 0x0, 0x0) [ 3221.044072] blktrace: Concurrent blktraces are not allowed on loop14 [ 3221.047260] EXT4-fs (loop1): unable to read superblock [ 3221.051959] blktrace: Concurrent blktraces are not allowed on loop6 [ 3221.064001] FAULT_INJECTION: forcing a failure. [ 3221.064001] name failslab, interval 1, probability 0, space 0, times 0 [ 3221.066457] CPU: 0 PID: 15701 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3221.067916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3221.069662] Call Trace: [ 3221.070234] dump_stack+0x107/0x167 [ 3221.071006] should_fail.cold+0x5/0xa [ 3221.071813] ? __alloc_skb+0x6d/0x5b0 [ 3221.072624] should_failslab+0x5/0x20 [ 3221.073426] kmem_cache_alloc_node+0x55/0x330 [ 3221.074387] __alloc_skb+0x6d/0x5b0 [ 3221.075156] alloc_skb_with_frags+0x92/0x570 [ 3221.076085] sock_alloc_send_pskb+0x7af/0x930 [ 3221.077036] ? sk_alloc+0x350/0x350 [ 3221.077810] ? create_object.isra.0+0x3ad/0xa20 [ 3221.078800] ? lock_release+0x680/0x680 [ 3221.079635] ? find_held_lock+0x2c/0x110 [ 3221.080509] __ip_append_data+0x162d/0x3310 [ 3221.081436] ? lock_downgrade+0x6d0/0x6d0 [ 3221.082327] ? do_raw_spin_lock+0x121/0x260 [ 3221.083251] ? ip_frag_init+0x350/0x350 [ 3221.084104] ? __ip_finish_output.part.0+0xb70/0xb70 [ 3221.085186] ? ip_route_output_key_hash+0x19c/0x340 [ 3221.086248] ? ipv4_mtu+0x1ed/0x2c0 [ 3221.087020] ip_make_skb+0x22a/0x2a0 [ 3221.087819] ? ip_frag_init+0x350/0x350 [ 3221.088881] ? ip_flush_pending_frames+0x20/0x20 [ 3221.089889] ? lock_downgrade+0x6d0/0x6d0 [ 3221.090775] ? xfrm_lookup_route+0x65/0x210 [ 3221.091692] udp_sendmsg+0x161b/0x2220 [ 3221.092523] ? ip_frag_init+0x350/0x350 [ 3221.093371] ? udp_setsockopt+0xc0/0xc0 [ 3221.094234] ? sock_has_perm+0x1ea/0x280 [ 3221.095115] ? __import_iovec+0x458/0x590 [ 3221.095981] ? udp_setsockopt+0xc0/0xc0 [ 3221.096825] inet_sendmsg+0x105/0x140 [ 3221.097631] ? inet_send_prepare+0x540/0x540 [ 3221.098582] __sock_sendmsg+0x13c/0x190 [ 3221.099420] ____sys_sendmsg+0x334/0x870 [ 3221.100274] ? sock_write_iter+0x3d0/0x3d0 [ 3221.101169] ? do_recvmmsg+0x6d0/0x6d0 [ 3221.101990] ? __lock_acquire+0x1657/0x5b00 [ 3221.102924] ___sys_sendmsg+0xf3/0x170 [ 3221.103757] ? sendmsg_copy_msghdr+0x160/0x160 [ 3221.104452] blktrace: Concurrent blktraces are not allowed on loop14 [ 3221.104731] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3221.107240] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3221.108196] ? trace_hardirqs_on+0x5b/0x180 [ 3221.109118] ? lock_acquire+0x197/0x470 [ 3221.109956] ? find_held_lock+0x2c/0x110 [ 3221.110831] ? __might_fault+0xd3/0x180 [ 3221.111674] ? lock_downgrade+0x6d0/0x6d0 [ 3221.112565] __sys_sendmmsg+0x195/0x470 [ 3221.113401] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3221.114327] ? lock_downgrade+0x6d0/0x6d0 [ 3221.115214] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3221.116235] ? wait_for_completion_io+0x270/0x270 [ 3221.117273] ? rcu_read_lock_any_held+0x75/0xa0 [ 3221.118258] ? vfs_write+0x354/0xb10 [ 3221.119042] ? fput_many+0x2f/0x1a0 [ 3221.119814] ? ksys_write+0x1a9/0x260 [ 3221.120615] ? __ia32_sys_read+0xb0/0xb0 [ 3221.121478] __x64_sys_sendmmsg+0x99/0x100 [ 3221.122378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3221.123458] do_syscall_64+0x33/0x40 [ 3221.124250] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3221.125325] RIP: 0033:0x7fcb10dbfb19 [ 3221.126113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3221.130050] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3221.131674] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3221.133185] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3221.134706] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3221.136237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3221.137736] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:12:35 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3221.149092] loop1: detected capacity change from 0 to 135266304 [ 3221.181498] loop1: detected capacity change from 0 to 512 [ 3221.190730] EXT4-fs (loop1): unable to read superblock 12:12:35 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3221.229949] loop1: detected capacity change from 0 to 135266304 12:12:46 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0xe00}], 0x1, 0x0) 12:12:46 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:12:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x9, &(0x7f0000001d80)=[{&(0x7f00000018c0)="26869e830b0f406df46ff7322f87a46a7ab91a06c6c22d864c6f3edbd58ccfbc0af005649a610a66e12e9f526d66b7f938d45df72c819e160d6f10cbb8c46feafd1ea477aa78d01ca6adaf5257c8dbbac936baa4ff6056089be8d96b8fc2e0551f00f8ba09b22adaa13b1a576a37360e557be0012077d19466635af24a2d858132a20e24e5d6a64984a49a46f00bc0d7ff37c1a6d6e3989cb1743fcc369b", 0x9e, 0x9}, {&(0x7f0000000200)="705b2eb16e6873c8f93e", 0xa, 0x401}, {&(0x7f0000001980)="906bf10631ca95149d68dd4053be7a9aba05ffc4e9fe72dd26a25e753393274643cce613bf12e0c0eb522e870397d484134ff5d5c43dfcbf9114", 0x3a, 0x1ff}, {&(0x7f00000019c0)="2dd71a02bf700d9a296846de09607502c8ffa4083425bce3423e36833a4fad032cb7373f3ece85f88f22c4d333", 0x2d, 0xf6}, {&(0x7f0000001a00)="b1899c99d5f072c935ca359c8e49c196536cb2e1c24be94891717404ccac6031100b352e40835020da93cf9ad7be8ef3ba97945fdd54dbb816f3adf8d88919700bce36c35cd9bfff1027a64de3f5d7dc9754f290940560cc27dc8e0929d2dfbcfe4e4383b71957830386cd6a9607f3d5b1a4a04b7135b8495f2b3f2ed2228c89ec59336a46b01b1be24a6f354cc736d00d6c3f1dc17bade2895bb601817d8473b041ac23d8811526c30b1f19deb6e00648ba286b7bc5833efc61f535", 0xbc, 0x5}, {&(0x7f0000001ac0)="3a078c683bf4d78b254be8b174aa082a3a41d863f8a40d2647d082c9d93a5015fda5956afebd9e384804990c0f33a4ba7944a67e54673fccdba69b4b4dfa721699827bed42265899fdae713f7156289928caf2729c980d079345edf640019e0328b970ce93d261494cb56bd3e7cf9317456eae77bf170dc3573e4139470dc05d568d64a04bf7f2c839c795940976706997cdc3baed9e62950c04dc2eac3a8e81732faa13cfdcf395537914d0fe6076f9bb53d4bf053355de964550d1298f55a300a17ad0a123cbba020e28", 0xcb, 0x9d}, {&(0x7f0000001bc0)="563639b4a66b5a1cb2b10f8cb6ef56e1113c7ca5e38603b02681d52783c92205bac109fb2adab6b617c8ee910c031876f77ec89890d4bb759ba830c53c95353ed7a368a084640c8b321e455961457c68ceea", 0x52}, {&(0x7f0000001c40)="b77ba4d377405070fd828836bae2c0af6ea8d84ea08bea4a3a7affdfbc67869d7b8276ad6e068f3c38fc1dd6fa6d02545109", 0x32, 0x8}, {&(0x7f0000001c80)="c6e42196055e04db2a064a07c2d043969b61ee54e9908fca12d14dc8a9fd24c343c4fb967c10bf409de3212ac0e09531c4dbce34b1514692120a3e88408cf0b7d4fe2356c6738119ec7044bf18f2a54150f762ffda45e00a95a53a3fa4f49a9903efb654d3448bc024b581547d33e794d1c3928b28994d5bb86abfbe541f627edd87979c4336b407a3a020bb4f2208edca86cfb565bfaf74c458df9c21a508408e739232cd8b67bb683a0341bc62d622bef66bb2604462f4db9a0cedb0512021139eec4b9add999e5d63", 0xca, 0x8001}], 0x0, &(0x7f0000000040)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x400, 0x9, &(0x7f0000001780)=[{&(0x7f0000000400)="6d1513f3b214300047caa73ab988b3", 0xf, 0x1ea}, {&(0x7f0000000440)="f7f244c26135dbaca590510be4029c95a225228b6c8fc5ad0408922ff9d6a38f5b97db5f398369c51f59b33a2084", 0x2e, 0x3}, {&(0x7f0000000480)="0b56022c3e8c3cb50967ce51cb359bca9b2960fa3cad6f2e23a2d4445b0cc5772fd9de3fb50604e2e5e13d58ac20e7cbf04d244092953fe2c91b68a01a0dd907b6061a398b6e31ea22ef0d927d7b965295271a33b8f03d8f96ba47bb782c601ce64e662342b7f8fc06f67aa2268b992ed7b9b2a964f170bc7b5105a18ef0eaec250fddeba9565fadf314e340f785aa36612dd3a747194c659222760052419ccfcb20551ed69403c4ed4de958be20a2e397e1607ad406142419babb467d136d6e457fe0607226a8b5acc3833815", 0xcd, 0x1}, {&(0x7f0000000580)="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", 0x1000, 0xec}, {&(0x7f0000001580)="688a317fb3af100c07c4c5c2090e3debeb6be247c99985be19a2547f174813a18c7c583b535a7aa1d3a829bcdab1924163ee3bf8cbf4815deb83b2fb842145a6d17c1c35a1c3761144a65d6b7a0a67c0c9f2d9329e83684cbcf0", 0x5a, 0x9}, {&(0x7f0000001600)="31d187461f5b1679ca245c36e62b6189ccf925cf58184233f0f8c501035effdca41610601cbe1caf6831b2f2583e30cc308487965ca4bb2a73fae1b894358508b799640b3f751cfe11", 0x49, 0x2}, {&(0x7f0000001680)="6d1bffa69996353a8f6762539c954a20e30a9d1a9854ea96ca4a318401633813e7f04612ed91b6960b800334e620477ff6", 0x31, 0x31e6f00b}, {&(0x7f00000016c0)="0ad38d49c6391aebce3e08532694246eec8bf679bda0cd41d9118f748e8e37c1783417dea55a3accac345fd242b13a7ee23323a5fb32fdb16ddea49a5120adaeb6ff629c86ed5f9dd1128a3b40c0ed31db06c183cdf70e6beb95827045a2a7f9efc4fa4fb3ee5e13d9cfe284c29b8c08051f54f5b76e282118c9f5", 0x7b, 0x3}, {&(0x7f0000001740)="22d11333c665689db204f593b7e187", 0xf, 0x7fffffff}], 0x0, &(0x7f0000001880)={[{@size={'size', 0x3d, [0x32]}}], [{@subj_type={'subj_type', 0x3d, 'nr_blocks'}}, {@obj_user={'obj_user', 0x3d, ',}-\xdb\xd7+-::'}}]}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f00000001c0)=0xe8) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="1470f79ac000a380d2a3db58305222acb678207440b37df9797b95f74e47eb368a0b8b0a21966427ab4a6a6d9d94a688c567a821ebf579561e1bd5fe5b0e9843403153710c425cc2353303c0f40e1912b98e8b6fc7a10ca360e0f5bff119dd9e1d0055344f", 0x65, 0x4}], 0x800, &(0x7f0000001e80)=ANY=[@ANYBLOB="6e725f626c6f636b733d1270786d2539352c666f776e65723c", @ANYRESDEC=r0, @ANYBLOB="c9e6ac2fb09005d0eed65947c26d407423a76e2c3ad431fadd25fdbc7d39d7418314c32168bface2ad5c7c4323b507ec7b02f00db5a45fde9854f027acdf71c08ee2cee3658360f9c334"]) 12:12:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 94) 12:12:46 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x11}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:12:46 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x2511000000000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:12:46 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="025c37377f0d4030cffef429cbd68ce14b33090b38f0183b694025e3e0c1708bf274a3318d1d97f02ede8d0b37e271e89b", 0x31, 0x1, 0x1, {0x0, r1}}, 0x1f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000980)={0x1fc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7c98}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x5, 0x7, 0x9c, 0x2}, {0xffc1, 0xff, 0x6b, 0x7fff}, {0x1, 0x55, 0x4, 0x101}, {0x2, 0x1, 0x8, 0x8001}, {0x6, 0x8, 0x3f, 0x9}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xffe1, 0x3f, 0xcc, 0x5}, {0xffff, 0x11, 0x7f, 0x2}, {0x7f, 0xc0, 0x9, 0xb5}, {0x4, 0xb1, 0x1, 0x7f}, {0x2, 0x3f, 0xff, 0x9}]}}}]}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x84000}, 0x40801) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x301040, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:12:46 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x0, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3232.744730] loop1: detected capacity change from 0 to 65536 [ 3232.758084] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 3232.771646] FAULT_INJECTION: forcing a failure. [ 3232.771646] name failslab, interval 1, probability 0, space 0, times 0 [ 3232.772987] CPU: 1 PID: 15733 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3232.773741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3232.774653] Call Trace: [ 3232.774955] dump_stack+0x107/0x167 [ 3232.775356] should_fail.cold+0x5/0xa [ 3232.775779] ? create_object.isra.0+0x3a/0xa20 [ 3232.776281] should_failslab+0x5/0x20 [ 3232.776702] kmem_cache_alloc+0x5b/0x310 [ 3232.777161] ? lock_acquire+0x197/0x470 [ 3232.777595] create_object.isra.0+0x3a/0xa20 [ 3232.778083] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3232.778549] blktrace: Concurrent blktraces are not allowed on loop14 [ 3232.778694] kmem_cache_alloc+0x159/0x310 [ 3232.780644] dst_alloc+0x9e/0x5d0 [ 3232.781025] ? trace_hardirqs_on+0x5b/0x180 [ 3232.781533] rt_dst_alloc+0x73/0x440 [ 3232.781944] ip_route_output_key_hash_rcu+0x98d/0x25b0 [ 3232.782563] ip_route_output_key_hash+0x185/0x340 [ 3232.783239] ? ip_route_output_key_hash_rcu+0x25b0/0x25b0 [ 3232.783919] ? lock_downgrade+0x6d0/0x6d0 [ 3232.784371] ip_route_output_flow+0x23/0x150 [ 3232.784855] udp_sendmsg+0x190d/0x2220 [ 3232.785291] ? ip_frag_init+0x350/0x350 [ 3232.785840] ? udp_setsockopt+0xc0/0xc0 [ 3232.786296] ? sock_has_perm+0x1ea/0x280 [ 3232.786850] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3232.787570] ? __import_iovec+0x458/0x590 [ 3232.788048] ? udp_setsockopt+0xc0/0xc0 [ 3232.788481] inet_sendmsg+0x105/0x140 [ 3232.788933] ? inet_send_prepare+0x540/0x540 [ 3232.789485] __sock_sendmsg+0x13c/0x190 [ 3232.789931] ____sys_sendmsg+0x334/0x870 [ 3232.790477] ? sock_write_iter+0x3d0/0x3d0 [ 3232.791039] ? do_recvmmsg+0x6d0/0x6d0 [ 3232.791590] ? find_held_lock+0x2c/0x110 [ 3232.792121] ___sys_sendmsg+0xf3/0x170 [ 3232.792573] ? sendmsg_copy_msghdr+0x160/0x160 [ 3232.793071] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3232.793679] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3232.794286] ? trace_hardirqs_on+0x5b/0x180 [ 3232.794775] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3232.795257] ? finish_task_switch+0x126/0x5d0 [ 3232.795746] ? finish_task_switch+0xef/0x5d0 [ 3232.796220] ? __switch_to+0x572/0xf70 [ 3232.796728] ? __switch_to_asm+0x3a/0x60 [ 3232.797226] ? __switch_to_asm+0x34/0x60 [ 3232.797676] ? __schedule+0x82c/0x1ea0 [ 3232.798113] ? io_schedule_timeout+0x140/0x140 [ 3232.798660] __sys_sendmmsg+0x195/0x470 [ 3232.799281] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3232.799881] ? lock_downgrade+0x6d0/0x6d0 [ 3232.800333] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3232.800971] ? wait_for_completion_io+0x270/0x270 [ 3232.801515] ? rcu_read_lock_any_held+0x75/0xa0 [ 3232.802023] ? vfs_write+0x354/0xb10 [ 3232.802433] ? fput_many+0x2f/0x1a0 [ 3232.802825] ? ksys_write+0x1a9/0x260 [ 3232.803326] ? __ia32_sys_read+0xb0/0xb0 [ 3232.803848] __x64_sys_sendmmsg+0x99/0x100 [ 3232.804317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3232.805071] do_syscall_64+0x33/0x40 [ 3232.805504] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3232.806142] RIP: 0033:0x7fcb10dbfb19 [ 3232.806548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3232.808820] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3232.809846] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3232.810719] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3232.811489] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3232.812258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3232.813026] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3232.820761] loop1: detected capacity change from 0 to 135266304 [ 3232.821749] tmpfs: Unknown parameter 'subj_type' [ 3232.822700] blktrace: Concurrent blktraces are not allowed on loop6 [ 3232.825380] blktrace: Concurrent blktraces are not allowed on loop4 [ 3232.841987] tmpfs: Bad value for 'nr_blocks' 12:12:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="0ca75d5a2ef78e1b524c1e7a42e5f5c92bda5c0a8b27203210bdc45038837941bec413ea8c74caef70428817d0cbce1ffefb821dffe3856420266d80abb35c26d95e1f25b9e303f71abc5f69db7e125d86a1ddc00594f4edc60957c02f2c3f07885ad5", 0x63, 0x2}], 0x89, &(0x7f00000001c0)={[{@init_itable_val}], [{@context={'context', 0x3d, 'sysadm_u'}}]}) [ 3232.883856] loop1: detected capacity change from 0 to 512 [ 3232.888237] EXT4-fs (loop1): unable to read superblock [ 3232.900984] blktrace: Concurrent blktraces are not allowed on loop14 12:12:47 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x0, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:12:47 executing program 1: prctl$PR_PAC_RESET_KEYS(0x36, 0x15) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1, 0xffffffffffffffff}}, './file0\x00'}) [ 3232.944880] loop1: detected capacity change from 0 to 512 [ 3232.952938] EXT4-fs (loop1): unable to read superblock 12:12:47 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) chmod(&(0x7f0000000180)='./file0\x00', 0x8d) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:12:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 95) [ 3232.998808] blktrace: Concurrent blktraces are not allowed on loop4 12:12:47 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x12}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:12:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{0x0, 0x0, 0xfd}, {&(0x7f0000000340)="0d44c6944bdb986f3ef8ec005181a1575c87334d695f861770b007545190f56392f8006491cc9c4e8ba8c0c43e5316c028d8d80d828a8cc8ff0a7bb56627b91a1af5642a52e39cbfeb74d0bcd7fab490ea3900e87adfc66c239b91234c768af3124a16ccfe50a4e8965abfca77b92acda01cb2b5dcdd7b8aaac5570cb5d657a20c231aec5caea572a8756f810118a087319c2bed8f97dea3ccc4ee9623b32104159586d34e9ffcf292a3e7b6775016e16f557e69cee7022c5f701b009a2ef36aef03b1e6803ade846421f8578359f140a503d7ea6b1148e5f4f257", 0xdb, 0x574}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02b3728e47943f191e2e6f98416abdc058d5643a1cdd9049a514660b3fa5079cab84f4abb33ab1c82747af9e9df36938bd8c8f4608c744b1085f20de059b884654f78f7d23b48a664bc4485ed21b1b3a6f9eac93410ce404be8799fe4aa773b8623cae8adddbcf7b70175a188a0c33daaede64c9b0696a07a22a0bb66976143dc2c45d6d9a48ef9b487e45b99b3aef000ec7165be218f40580c56d00c56f1641e69247a826dfe4b74630086f69323f3cf5bb622c5ed11a0f943f33ce287d1ff85db6bf6e244af8"]) 12:12:47 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3233.078568] FAULT_INJECTION: forcing a failure. [ 3233.078568] name failslab, interval 1, probability 0, space 0, times 0 [ 3233.080145] CPU: 1 PID: 15769 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3233.081011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3233.082142] Call Trace: [ 3233.082481] dump_stack+0x107/0x167 [ 3233.082980] should_fail.cold+0x5/0xa [ 3233.083432] ? create_object.isra.0+0x3a/0xa20 [ 3233.084074] should_failslab+0x5/0x20 [ 3233.084634] kmem_cache_alloc+0x5b/0x310 [ 3233.085247] create_object.isra.0+0x3a/0xa20 [ 3233.085754] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3233.086447] kmem_cache_alloc_node+0x169/0x330 [ 3233.087091] __alloc_skb+0x6d/0x5b0 [ 3233.087583] alloc_skb_with_frags+0x92/0x570 [ 3233.088211] sock_alloc_send_pskb+0x7af/0x930 [ 3233.088821] ? sk_alloc+0x350/0x350 [ 3233.089236] ? create_object.isra.0+0x3ad/0xa20 [ 3233.089886] ? lock_release+0x680/0x680 [ 3233.090402] ? find_held_lock+0x2c/0x110 [ 3233.090967] __ip_append_data+0x162d/0x3310 [ 3233.091679] ? lock_downgrade+0x6d0/0x6d0 [ 3233.092155] ? do_raw_spin_lock+0x121/0x260 [ 3233.092761] ? ip_frag_init+0x350/0x350 [ 3233.093222] ? __ip_finish_output.part.0+0xb70/0xb70 [ 3233.093895] ? ip_route_output_key_hash+0x19c/0x340 [ 3233.094679] ? ipv4_mtu+0x1ed/0x2c0 [ 3233.095187] ip_make_skb+0x22a/0x2a0 [ 3233.095618] ? ip_frag_init+0x350/0x350 [ 3233.096171] ? ip_flush_pending_frames+0x20/0x20 [ 3233.096737] ? lock_downgrade+0x6d0/0x6d0 [ 3233.097226] ? xfrm_lookup_route+0x65/0x210 [ 3233.097717] udp_sendmsg+0x161b/0x2220 [ 3233.098293] ? ip_frag_init+0x350/0x350 [ 3233.098785] ? udp_setsockopt+0xc0/0xc0 [ 3233.099444] ? sock_has_perm+0x1ea/0x280 [ 3233.100027] ? __import_iovec+0x458/0x590 [ 3233.100500] ? udp_setsockopt+0xc0/0xc0 [ 3233.101062] inet_sendmsg+0x105/0x140 [ 3233.101535] ? inet_send_prepare+0x540/0x540 [ 3233.102097] __sock_sendmsg+0x13c/0x190 [ 3233.102642] ____sys_sendmsg+0x334/0x870 [ 3233.103281] ? sock_write_iter+0x3d0/0x3d0 [ 3233.103879] ? do_recvmmsg+0x6d0/0x6d0 [ 3233.104324] ? __lock_acquire+0x1657/0x5b00 [ 3233.104830] ___sys_sendmsg+0xf3/0x170 [ 3233.105280] ? sendmsg_copy_msghdr+0x160/0x160 [ 3233.105807] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3233.106425] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3233.106934] ? trace_hardirqs_on+0x5b/0x180 [ 3233.107435] ? lock_acquire+0x197/0x470 [ 3233.107894] ? find_held_lock+0x2c/0x110 [ 3233.108362] ? __might_fault+0xd3/0x180 [ 3233.108821] ? lock_downgrade+0x6d0/0x6d0 [ 3233.109309] __sys_sendmmsg+0x195/0x470 [ 3233.109770] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3233.110263] ? lock_downgrade+0x6d0/0x6d0 [ 3233.110753] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3233.111308] ? wait_for_completion_io+0x270/0x270 [ 3233.111859] ? rcu_read_lock_any_held+0x75/0xa0 [ 3233.112391] ? vfs_write+0x354/0xb10 [ 3233.112819] ? fput_many+0x2f/0x1a0 [ 3233.113235] ? ksys_write+0x1a9/0x260 [ 3233.113671] ? __ia32_sys_read+0xb0/0xb0 [ 3233.114143] __x64_sys_sendmmsg+0x99/0x100 [ 3233.114631] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3233.115218] do_syscall_64+0x33/0x40 [ 3233.115642] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3233.116228] RIP: 0033:0x7fcb10dbfb19 [ 3233.116655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3233.118772] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3233.119641] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3233.120460] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3233.121274] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3233.122088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3233.122907] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3233.144734] loop1: detected capacity change from 0 to 2560 [ 3233.154262] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 12:12:47 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x2}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:12:47 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0xe00}], 0x1, 0x0) [ 3233.184216] loop1: detected capacity change from 0 to 2560 [ 3233.187787] blktrace: Concurrent blktraces are not allowed on loop14 [ 3233.190372] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 12:12:47 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x0, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3233.201751] blktrace: Concurrent blktraces are not allowed on loop4 12:12:47 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x13}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 3233.278562] blktrace: Concurrent blktraces are not allowed on loop14 [ 3233.283320] blktrace: Concurrent blktraces are not allowed on loop6 [ 3247.325221] Bluetooth: hci7: command 0x0406 tx timeout [ 3247.325280] Bluetooth: hci4: command 0x0406 tx timeout 12:13:02 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}, 0xe00}], 0x1, 0x0) 12:13:02 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x14}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:13:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) 12:13:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 96) 12:13:02 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:13:02 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000180)) 12:13:02 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:13:02 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x3}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3248.610387] loop1: detected capacity change from 0 to 512 [ 3248.621983] EXT4-fs (loop1): unable to read superblock [ 3248.625714] blktrace: Concurrent blktraces are not allowed on loop4 [ 3248.625977] blktrace: Concurrent blktraces are not allowed on loop14 [ 3248.642701] loop1: detected capacity change from 0 to 512 [ 3248.645666] FAULT_INJECTION: forcing a failure. [ 3248.645666] name failslab, interval 1, probability 0, space 0, times 0 [ 3248.647982] EXT4-fs (loop1): unable to read superblock [ 3248.648170] CPU: 0 PID: 15813 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3248.650699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3248.652513] Call Trace: [ 3248.653088] dump_stack+0x107/0x167 [ 3248.653891] should_fail.cold+0x5/0xa [ 3248.654730] ? create_object.isra.0+0x3a/0xa20 [ 3248.655726] should_failslab+0x5/0x20 [ 3248.656562] kmem_cache_alloc+0x5b/0x310 [ 3248.657455] create_object.isra.0+0x3a/0xa20 [ 3248.658413] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3248.659534] kmem_cache_alloc_node+0x169/0x330 [ 3248.660525] __alloc_skb+0x6d/0x5b0 [ 3248.661320] alloc_skb_with_frags+0x92/0x570 [ 3248.662282] sock_alloc_send_pskb+0x7af/0x930 [ 3248.663276] ? sk_alloc+0x350/0x350 [ 3248.664056] ? create_object.isra.0+0x3ad/0xa20 [ 3248.665063] ? lock_release+0x680/0x680 [ 3248.665925] ? find_held_lock+0x2c/0x110 [ 3248.666823] __ip_append_data+0x162d/0x3310 [ 3248.667754] ? lock_downgrade+0x6d0/0x6d0 [ 3248.668649] ? do_raw_spin_lock+0x121/0x260 [ 3248.669599] ? ip_frag_init+0x350/0x350 [ 3248.670486] ? __ip_finish_output.part.0+0xb70/0xb70 [ 3248.671597] ? ip_route_output_key_hash+0x19c/0x340 [ 3248.672684] ? ipv4_mtu+0x1ed/0x2c0 [ 3248.673468] ip_make_skb+0x22a/0x2a0 [ 3248.674286] ? ip_frag_init+0x350/0x350 [ 3248.675182] ? ip_flush_pending_frames+0x20/0x20 [ 3248.676215] ? lock_downgrade+0x6d0/0x6d0 [ 3248.677128] ? xfrm_lookup_route+0x65/0x210 [ 3248.678079] udp_sendmsg+0x161b/0x2220 [ 3248.678952] ? ip_frag_init+0x350/0x350 [ 3248.679828] ? udp_setsockopt+0xc0/0xc0 [ 3248.680718] ? sock_has_perm+0x1ea/0x280 [ 3248.681616] ? __import_iovec+0x458/0x590 [ 3248.682523] ? udp_setsockopt+0xc0/0xc0 [ 3248.683398] inet_sendmsg+0x105/0x140 [ 3248.684232] ? inet_send_prepare+0x540/0x540 [ 3248.685185] __sock_sendmsg+0x13c/0x190 [ 3248.686054] ____sys_sendmsg+0x334/0x870 [ 3248.686959] ? sock_write_iter+0x3d0/0x3d0 [ 3248.687880] ? do_recvmmsg+0x6d0/0x6d0 [ 3248.688727] ? find_held_lock+0x2c/0x110 [ 3248.689629] ___sys_sendmsg+0xf3/0x170 [ 3248.690492] ? sendmsg_copy_msghdr+0x160/0x160 [ 3248.691498] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3248.692631] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3248.693602] ? trace_hardirqs_on+0x5b/0x180 [ 3248.694560] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3248.695546] ? finish_task_switch+0x126/0x5d0 [ 3248.696524] ? finish_task_switch+0xef/0x5d0 [ 3248.697474] ? __switch_to+0x572/0xf70 [ 3248.698317] ? __switch_to_asm+0x3a/0x60 [ 3248.699207] ? __switch_to_asm+0x34/0x60 [ 3248.700101] ? __schedule+0x82c/0x1ea0 [ 3248.700952] ? io_schedule_timeout+0x140/0x140 [ 3248.701964] __sys_sendmmsg+0x195/0x470 [ 3248.702844] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3248.703773] ? lock_downgrade+0x6d0/0x6d0 [ 3248.704690] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3248.705748] ? wait_for_completion_io+0x270/0x270 [ 3248.706803] ? rcu_read_lock_any_held+0x75/0xa0 [ 3248.707817] ? vfs_write+0x354/0xb10 [ 3248.708621] ? fput_many+0x2f/0x1a0 [ 3248.709404] ? ksys_write+0x1a9/0x260 [ 3248.710226] ? __ia32_sys_read+0xb0/0xb0 [ 3248.711130] __x64_sys_sendmmsg+0x99/0x100 [ 3248.712049] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3248.713176] do_syscall_64+0x33/0x40 [ 3248.713984] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3248.715125] RIP: 0033:0x7fcb10dbfb19 [ 3248.715960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3248.720089] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3248.721799] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3248.723413] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3248.725023] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3248.726638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3248.728239] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3248.805796] blktrace: Concurrent blktraces are not allowed on loop14 12:13:02 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3248.846532] blktrace: Concurrent blktraces are not allowed on loop4 12:13:03 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x15}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:13:03 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x4}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3248.939631] blktrace: Concurrent blktraces are not allowed on loop6 12:13:03 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:13:03 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x2bf9, 0x0, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000180)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:13:03 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:13:03 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 3249.011696] blktrace: Concurrent blktraces are not allowed on loop14 12:13:03 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 97) 12:13:03 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x16}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 3249.053015] blktrace: Concurrent blktraces are not allowed on loop4 [ 3249.063008] blktrace: Concurrent blktraces are not allowed on loop14 12:13:03 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3249.126111] blktrace: Concurrent blktraces are not allowed on loop6 [ 3249.140738] FAULT_INJECTION: forcing a failure. [ 3249.140738] name failslab, interval 1, probability 0, space 0, times 0 [ 3249.143065] CPU: 1 PID: 15843 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3249.144249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3249.145623] Call Trace: [ 3249.146062] dump_stack+0x107/0x167 [ 3249.146692] should_fail.cold+0x5/0xa [ 3249.147317] ? create_object.isra.0+0x3a/0xa20 [ 3249.148074] should_failslab+0x5/0x20 [ 3249.148705] kmem_cache_alloc+0x5b/0x310 [ 3249.149371] create_object.isra.0+0x3a/0xa20 [ 3249.150109] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3249.150955] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3249.151796] ? alloc_skb_with_frags+0x92/0x570 [ 3249.152556] __alloc_skb+0xb1/0x5b0 [ 3249.153186] alloc_skb_with_frags+0x92/0x570 [ 3249.153931] sock_alloc_send_pskb+0x7af/0x930 [ 3249.154695] ? sk_alloc+0x350/0x350 [ 3249.155285] ? create_object.isra.0+0x3ad/0xa20 [ 3249.156069] ? lock_release+0x680/0x680 [ 3249.156731] ? find_held_lock+0x2c/0x110 [ 3249.157408] __ip_append_data+0x162d/0x3310 [ 3249.158114] ? lock_downgrade+0x6d0/0x6d0 [ 3249.158819] ? do_raw_spin_lock+0x121/0x260 [ 3249.159536] ? ip_frag_init+0x350/0x350 [ 3249.160214] ? __ip_finish_output.part.0+0xb70/0xb70 [ 3249.161064] ? ip_route_output_key_hash+0x19c/0x340 [ 3249.161892] ? ipv4_mtu+0x1ed/0x2c0 [ 3249.162515] ip_make_skb+0x22a/0x2a0 [ 3249.163138] ? ip_frag_init+0x350/0x350 [ 3249.163800] ? ip_flush_pending_frames+0x20/0x20 [ 3249.164590] ? lock_downgrade+0x6d0/0x6d0 [ 3249.165289] ? xfrm_lookup_route+0x65/0x210 [ 3249.166009] udp_sendmsg+0x161b/0x2220 [ 3249.166672] ? ip_frag_init+0x350/0x350 [ 3249.167338] ? udp_setsockopt+0xc0/0xc0 [ 3249.168020] ? sock_has_perm+0x1ea/0x280 [ 3249.168713] ? __import_iovec+0x458/0x590 [ 3249.169401] ? udp_setsockopt+0xc0/0xc0 [ 3249.170064] inet_sendmsg+0x105/0x140 [ 3249.170709] ? inet_send_prepare+0x540/0x540 [ 3249.171441] __sock_sendmsg+0x13c/0x190 [ 3249.172104] ____sys_sendmsg+0x334/0x870 [ 3249.172783] ? sock_write_iter+0x3d0/0x3d0 [ 3249.173486] ? do_recvmmsg+0x6d0/0x6d0 [ 3249.174135] ? __lock_acquire+0x1657/0x5b00 [ 3249.174872] ___sys_sendmsg+0xf3/0x170 [ 3249.175523] ? sendmsg_copy_msghdr+0x160/0x160 [ 3249.176283] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3249.177147] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3249.177886] ? trace_hardirqs_on+0x5b/0x180 [ 3249.178611] ? lock_acquire+0x197/0x470 [ 3249.179272] ? find_held_lock+0x2c/0x110 [ 3249.179944] ? __might_fault+0xd3/0x180 [ 3249.180599] ? lock_downgrade+0x6d0/0x6d0 [ 3249.181295] __sys_sendmmsg+0x195/0x470 [ 3249.181951] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3249.182674] ? lock_downgrade+0x6d0/0x6d0 [ 3249.183365] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3249.184159] ? wait_for_completion_io+0x270/0x270 [ 3249.184955] ? rcu_read_lock_any_held+0x75/0xa0 [ 3249.185713] ? vfs_write+0x354/0xb10 [ 3249.186326] ? fput_many+0x2f/0x1a0 [ 3249.186927] ? ksys_write+0x1a9/0x260 [ 3249.187555] ? __ia32_sys_read+0xb0/0xb0 [ 3249.188229] __x64_sys_sendmmsg+0x99/0x100 [ 3249.188928] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3249.189777] do_syscall_64+0x33/0x40 [ 3249.190393] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3249.191252] RIP: 0033:0x7fcb10dbfb19 [ 3249.191868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3249.194865] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3249.196103] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3249.197260] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3249.198418] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3249.199593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3249.200752] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:13:03 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:13:03 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x3ff, 0x6}}, './file0\x00'}) [ 3249.245981] blktrace: Concurrent blktraces are not allowed on loop4 [ 3249.266509] loop1: detected capacity change from 0 to 512 [ 3249.283856] EXT4-fs (loop1): unable to read superblock [ 3249.304831] loop1: detected capacity change from 0 to 512 [ 3249.309889] EXT4-fs (loop1): unable to read superblock 12:13:17 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x5}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:13:17 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:13:17 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:13:17 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x3, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x100000001) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)=@l2, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1, &(0x7f00000006c0)=""/225, 0xe1}, 0x40000002) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:13:17 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:13:17 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x17}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:13:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 98) 12:13:17 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[]) [ 3263.647639] blktrace: Concurrent blktraces are not allowed on loop14 [ 3263.665423] blktrace: Concurrent blktraces are not allowed on loop4 [ 3263.667880] loop1: detected capacity change from 0 to 135266304 [ 3263.679863] blktrace: Concurrent blktraces are not allowed on loop6 [ 3263.703855] loop1: detected capacity change from 0 to 135266304 [ 3263.724408] FAULT_INJECTION: forcing a failure. [ 3263.724408] name failslab, interval 1, probability 0, space 0, times 0 [ 3263.726892] CPU: 0 PID: 15878 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3263.728281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3263.729954] Call Trace: [ 3263.730487] dump_stack+0x107/0x167 [ 3263.731233] should_fail.cold+0x5/0xa [ 3263.732011] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3263.733058] ? create_object.isra.0+0x3a/0xa20 [ 3263.733983] should_failslab+0x5/0x20 [ 3263.734754] kmem_cache_alloc+0x5b/0x310 [ 3263.735579] create_object.isra.0+0x3a/0xa20 [ 3263.736456] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3263.737488] kmem_cache_alloc+0x159/0x310 [ 3263.738309] skb_clone+0x14f/0x3d0 [ 3263.739053] ip_mc_output+0x5e8/0xd50 [ 3263.739822] ? ip_build_and_send_pkt+0x10d0/0x10d0 [ 3263.740806] ip_send_skb+0x339/0x570 [ 3263.741559] udp_send_skb+0x6ec/0x1250 [ 3263.742352] udp_sendmsg+0x1659/0x2220 [ 3263.743151] ? ip_frag_init+0x350/0x350 [ 3263.743954] ? udp_setsockopt+0xc0/0xc0 [ 3263.744773] ? sock_has_perm+0x1ea/0x280 [ 3263.745608] ? __import_iovec+0x458/0x590 [ 3263.746439] ? udp_setsockopt+0xc0/0xc0 [ 3263.747249] inet_sendmsg+0x105/0x140 [ 3263.748015] ? inet_send_prepare+0x540/0x540 [ 3263.748902] __sock_sendmsg+0x13c/0x190 [ 3263.749708] ____sys_sendmsg+0x334/0x870 [ 3263.750532] ? sock_write_iter+0x3d0/0x3d0 [ 3263.751387] ? do_recvmmsg+0x6d0/0x6d0 [ 3263.752164] ? find_held_lock+0x2c/0x110 [ 3263.752991] ___sys_sendmsg+0xf3/0x170 [ 3263.753762] ? sendmsg_copy_msghdr+0x160/0x160 [ 3263.754694] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3263.755756] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3263.756665] ? trace_hardirqs_on+0x5b/0x180 [ 3263.757529] ? finish_task_switch+0x1a4/0x5d0 [ 3263.758431] ? __switch_to+0x572/0xf70 [ 3263.759219] ? __switch_to_asm+0x3a/0x60 [ 3263.760031] ? __switch_to_asm+0x34/0x60 [ 3263.760849] ? __schedule+0x82c/0x1ea0 [ 3263.761640] ? io_schedule_timeout+0x140/0x140 [ 3263.762582] __sys_sendmmsg+0x195/0x470 [ 3263.763390] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3263.764257] ? lock_downgrade+0x6d0/0x6d0 [ 3263.765102] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3263.766064] ? wait_for_completion_io+0x270/0x270 [ 3263.767054] ? rcu_read_lock_any_held+0x75/0xa0 [ 3263.767993] ? vfs_write+0x354/0xb10 [ 3263.768741] ? fput_many+0x2f/0x1a0 [ 3263.769475] ? ksys_write+0x1a9/0x260 [ 3263.770247] ? __ia32_sys_read+0xb0/0xb0 [ 3263.771068] __x64_sys_sendmmsg+0x99/0x100 [ 3263.771919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3263.772956] do_syscall_64+0x33/0x40 [ 3263.773911] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3263.774949] RIP: 0033:0x7fcb10dbfb19 [ 3263.775699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3263.779391] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3263.780931] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3263.782368] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3263.783831] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3263.785267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3263.786710] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:13:17 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x18}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:13:17 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:13:17 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x0, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3263.864377] blktrace: Concurrent blktraces are not allowed on loop4 12:13:18 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x6}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3263.923018] blktrace: Concurrent blktraces are not allowed on loop6 [ 3263.943362] blktrace: Concurrent blktraces are not allowed on loop14 12:13:18 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:13:18 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x400, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) socket$unix(0x1, 0x1, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x1, 0x100, 0x8, 0x4cc1}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000180)={0x0, 0x4}) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2ec, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0xb79, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x8000203}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) [ 3264.044086] blktrace: Concurrent blktraces are not allowed on loop14 [ 3264.055011] blktrace: Concurrent blktraces are not allowed on loop4 12:13:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 99) 12:13:30 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) link(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012063) perf_event_open(&(0x7f0000001d80)={0x1, 0xfffffffffffffefe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x33f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x7, 0x7, 0x0, 0x6, 0x0, 0x1}, 0xdf) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r1, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:13:30 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:13:30 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:13:30 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x0, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:13:30 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x19}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:13:30 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x7}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:13:30 executing program 1: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) read(r1, &(0x7f0000000080)=""/65, 0x41) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0xb1575afecd8b75a9, 0x70bd2b, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000040)='.\x00', 0x2000003) poll(&(0x7f0000000300)=[{r6}, {r7, 0x1000}, {r5, 0x402}, {r1, 0x419a32e8545ecdd0}, {r0, 0x2500}], 0x5, 0xffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x57, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) [ 3276.647756] blktrace: Concurrent blktraces are not allowed on loop4 [ 3276.649815] FAULT_INJECTION: forcing a failure. [ 3276.649815] name failslab, interval 1, probability 0, space 0, times 0 [ 3276.649838] CPU: 0 PID: 15920 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3276.653695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3276.654645] Call Trace: [ 3276.654963] dump_stack+0x107/0x167 [ 3276.655384] should_fail.cold+0x5/0xa [ 3276.655824] ? dst_alloc+0x9e/0x5d0 [ 3276.656247] should_failslab+0x5/0x20 [ 3276.656685] kmem_cache_alloc+0x5b/0x310 [ 3276.657158] dst_alloc+0x9e/0x5d0 [ 3276.657560] rt_dst_clone+0x59/0x870 [ 3276.657987] ip_mc_finish_output+0x95/0x280 [ 3276.658486] ip_mc_output+0x962/0xd50 [ 3276.658935] ? ip_build_and_send_pkt+0x10d0/0x10d0 [ 3276.659498] ip_send_skb+0x339/0x570 [ 3276.659925] udp_send_skb+0x6ec/0x1250 [ 3276.660376] udp_sendmsg+0x1659/0x2220 [ 3276.660824] ? ip_frag_init+0x350/0x350 [ 3276.661286] ? udp_setsockopt+0xc0/0xc0 [ 3276.661753] ? sock_has_perm+0x1ea/0x280 [ 3276.662229] ? __import_iovec+0x458/0x590 [ 3276.662709] ? udp_setsockopt+0xc0/0xc0 [ 3276.663169] inet_sendmsg+0x105/0x140 [ 3276.663605] ? inet_send_prepare+0x540/0x540 [ 3276.664109] __sock_sendmsg+0x13c/0x190 [ 3276.664568] ____sys_sendmsg+0x334/0x870 [ 3276.665035] ? sock_write_iter+0x3d0/0x3d0 [ 3276.665524] ? do_recvmmsg+0x6d0/0x6d0 [ 3276.665973] ? __lock_acquire+0x1657/0x5b00 [ 3276.666476] ___sys_sendmsg+0xf3/0x170 [ 3276.666931] ? sendmsg_copy_msghdr+0x160/0x160 [ 3276.667459] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3276.668062] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3276.668579] ? trace_hardirqs_on+0x5b/0x180 [ 3276.669076] ? lock_acquire+0x197/0x470 [ 3276.669534] ? find_held_lock+0x2c/0x110 [ 3276.670002] ? __might_fault+0xd3/0x180 [ 3276.670459] ? lock_downgrade+0x6d0/0x6d0 [ 3276.670954] __sys_sendmmsg+0x195/0x470 [ 3276.671416] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3276.671919] ? lock_downgrade+0x6d0/0x6d0 [ 3276.672406] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3276.672961] ? wait_for_completion_io+0x270/0x270 [ 3276.673523] ? rcu_read_lock_any_held+0x75/0xa0 [ 3276.674064] ? vfs_write+0x354/0xb10 [ 3276.674497] ? fput_many+0x2f/0x1a0 [ 3276.674922] ? ksys_write+0x1a9/0x260 [ 3276.675361] ? __ia32_sys_read+0xb0/0xb0 [ 3276.675831] __x64_sys_sendmmsg+0x99/0x100 [ 3276.676326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3276.676919] do_syscall_64+0x33/0x40 [ 3276.677352] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3276.677955] RIP: 0033:0x7fcb10dbfb19 [ 3276.678386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3276.680508] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3276.681391] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3276.682211] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3276.683037] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3276.683855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3276.684672] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 [ 3276.695608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15917 comm=syz-executor.1 12:13:30 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x0, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3276.732006] blktrace: Concurrent blktraces are not allowed on loop6 [ 3276.774717] loop1: detected capacity change from 0 to 512 [ 3276.778095] blktrace: Concurrent blktraces are not allowed on loop14 [ 3276.779460] EXT4-fs (loop1): unable to read superblock 12:13:30 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:13:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) (fail_nth: 100) 12:13:31 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x1a}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 3276.864354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15930 comm=syz-executor.1 [ 3276.881541] blktrace: Concurrent blktraces are not allowed on loop6 [ 3276.898970] blktrace: Concurrent blktraces are not allowed on loop4 12:13:31 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x1b}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:13:31 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100004}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) openat(r0, &(0x7f0000000180)='./file0\x00', 0x200800, 0x2) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) [ 3276.960391] blktrace: Concurrent blktraces are not allowed on loop6 [ 3277.001039] FAULT_INJECTION: forcing a failure. [ 3277.001039] name failslab, interval 1, probability 0, space 0, times 0 [ 3277.003573] CPU: 1 PID: 15947 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 3277.005054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3277.006829] Call Trace: [ 3277.007399] dump_stack+0x107/0x167 [ 3277.008174] should_fail.cold+0x5/0xa [ 3277.008985] ? create_object.isra.0+0x3a/0xa20 [ 3277.009957] should_failslab+0x5/0x20 [ 3277.010783] kmem_cache_alloc+0x5b/0x310 [ 3277.011648] create_object.isra.0+0x3a/0xa20 [ 3277.012579] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3277.013658] kmem_cache_alloc+0x159/0x310 [ 3277.014547] dst_alloc+0x9e/0x5d0 [ 3277.015296] rt_dst_clone+0x59/0x870 [ 3277.016085] ip_mc_finish_output+0x95/0x280 [ 3277.016999] ip_mc_output+0x962/0xd50 [ 3277.017820] ? ip_build_and_send_pkt+0x10d0/0x10d0 [ 3277.018867] ip_send_skb+0x339/0x570 [ 3277.019662] udp_send_skb+0x6ec/0x1250 [ 3277.020494] udp_sendmsg+0x1659/0x2220 [ 3277.021318] ? ip_frag_init+0x350/0x350 [ 3277.022159] ? udp_setsockopt+0xc0/0xc0 [ 3277.023019] ? sock_has_perm+0x1ea/0x280 [ 3277.023897] ? __import_iovec+0x458/0x590 [ 3277.024774] ? udp_setsockopt+0xc0/0xc0 [ 3277.025610] inet_sendmsg+0x105/0x140 [ 3277.026412] ? inet_send_prepare+0x540/0x540 [ 3277.027349] __sock_sendmsg+0x13c/0x190 [ 3277.028200] ____sys_sendmsg+0x334/0x870 [ 3277.029064] ? sock_write_iter+0x3d0/0x3d0 [ 3277.029954] ? do_recvmmsg+0x6d0/0x6d0 [ 3277.030788] ? __lock_acquire+0x1657/0x5b00 [ 3277.031709] ___sys_sendmsg+0xf3/0x170 [ 3277.032530] ? sendmsg_copy_msghdr+0x160/0x160 [ 3277.033493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3277.034591] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3277.035534] ? trace_hardirqs_on+0x5b/0x180 [ 3277.036454] ? lock_acquire+0x197/0x470 [ 3277.037297] ? find_held_lock+0x2c/0x110 [ 3277.038162] ? __might_fault+0xd3/0x180 [ 3277.039011] ? lock_downgrade+0x6d0/0x6d0 [ 3277.039906] __sys_sendmmsg+0x195/0x470 [ 3277.040747] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3277.041654] ? lock_downgrade+0x6d0/0x6d0 [ 3277.042543] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3277.043570] ? wait_for_completion_io+0x270/0x270 [ 3277.044594] ? rcu_read_lock_any_held+0x75/0xa0 [ 3277.045588] ? vfs_write+0x354/0xb10 [ 3277.046373] ? fput_many+0x2f/0x1a0 [ 3277.047148] ? ksys_write+0x1a9/0x260 [ 3277.047954] ? __ia32_sys_read+0xb0/0xb0 [ 3277.048815] __x64_sys_sendmmsg+0x99/0x100 [ 3277.049713] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3277.050801] do_syscall_64+0x33/0x40 [ 3277.051585] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3277.052659] RIP: 0033:0x7fcb10dbfb19 [ 3277.053450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3277.057319] RSP: 002b:00007fcb0e335188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3277.058932] RAX: ffffffffffffffda RBX: 00007fcb10ed2f60 RCX: 00007fcb10dbfb19 [ 3277.060432] RDX: 00000000040001a9 RSI: 0000000020000300 RDI: 0000000000000006 [ 3277.061927] RBP: 00007fcb0e3351d0 R08: 0000000000000000 R09: 0000000000000000 [ 3277.063431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 3277.064936] R13: 00007ffd304b08bf R14: 00007fcb0e335300 R15: 0000000000022000 12:13:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:13:42 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) link(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012063) perf_event_open(&(0x7f0000001d80)={0x1, 0xfffffffffffffefe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x33f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x7, 0x7, 0x0, 0x6, 0x0, 0x1}, 0xdf) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r1, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:13:42 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x2, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:13:42 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3287.966712] blktrace: Concurrent blktraces are not allowed on loop4 12:13:42 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x0, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:13:42 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x300}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:13:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001c80)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB="6e7366a8bf3865de03af492d59116eb167a1634525cf517ee0208d2b45ced1fcc5778d6d3fd9047a4a1599090b753fddf145df46f54239f24054ebbe92c62bf55ecc2fb4b58dd4620d32bc2439287981f32c6710206f886bd13ac2c9848898ec605c0c94b0a2e3662054c441ed9802d1d1c97c7cdb6fb6b12a73634504aba8bfdf3b67d9", @ANYRES64, @ANYRES32, @ANYRES32]) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001a80)={0x0, 0x0}, &(0x7f0000001ac0)=0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x5, 0x9, &(0x7f0000001880)=[{&(0x7f0000000480)="805411f924d09e190b78d6662182d56e33223e4f0ed47d0a78bdab343456ef72448533564879ef1ab2fe7d8904edfc7960db2f5e128d00e80eb784d7533fd9b364d06cc22518b11b46e976c63ee86a3dcb0e490ac1a13b30e6f9dcc5221fa327f5d8b626e2117bc43686160d8459b4d285bebb2ed548564e6f5f3f894d0847c08b4e187f12827da4a88796cf5149271ee00f8947b70f92c58d9e3ba39cb7c81b1a0cc63905db547d1abe354536cf3aead702199e1519bda3e6838c8f81105e365486785f4a42a5c1c50341f6364baf515026d1715fd287778aa1fa776791a9d9ed3fd1af4fc2d0ee22dbf2c8f2eeb6c7c430af534fd68e", 0xf7, 0x1}, {&(0x7f0000000580)="116152a5958edfaf089323fc0fc068cce412c3a84e2528de7930e4857b166096410f2ab440038b347e5f", 0x2a, 0x4}, {&(0x7f00000005c0)="77cb79e3ed0c4b5811426f6df664f16bc0bb2e53fc5b88b4d99feef30f7266a03b95", 0x22}, {&(0x7f0000000600)="58ae0107f09cde638bdcb3ed3f97b6ed7cb2750ea911b9d4850f6011484939e78a0b06d2ffc86e49f222102b670f17259b7a161f3c5522e6e8845926ba75cb4c0e1e71d6d58185eb9b74c4e7bc05b8ae7e9a34ad60bc4f2de3dc749253d22157cf92276d2254f687eb5191fa0b", 0x6d, 0x9d}, {&(0x7f0000000680)="34a708fe393c873e1531d88f149ab20553e834af30e159d35717b353b165c4c1bcd5ecac04f1c623524aea66e659defadfa67f3c02d60be36611128c22d0f6c37397b1864b87d20a93ce4feccee6a7101013e8639e1738c04a8dd05aa2c21f066fcd14c6d7215d3ef166dd7a833bf55a4e19b2c2220181107334be0ae2c322", 0x7f, 0x9}, {&(0x7f0000000700)="7e76d3108abac19407f3bab234b93524aa8caefed37931d77623bf1db299b131f8b7546221b0086481ee96ec2bcd884f2bfa47b6718ef8024c60a39ea704af101376c79bfcefb9efd2a0268fa80e9c0b41005f42134c07db14a090cef65c15ff17a3fe9573a0b9d7d556940654c5eef0568a58376453ecdb40a812b2b6c09ae7497a5ffa9415aa1c345ecd4d261a81b7e130c5ab002ad93cb89314dd2febbec2a7e77193ba4f0a7981dece830ef187596fe0e1888f20362143b6fdf8449456bf7af2", 0xc2, 0x6}, {&(0x7f0000000800)="4a49ebf7fcc9f1", 0x7}, {&(0x7f0000000840)="7e37f737e2844735268ec361450438eb4c9c0c45417d6389a80f8019e32fd0683a03b98afd6c0298b1cf0e9541e53a8928ee33849eb981", 0x37, 0x7}, {&(0x7f0000000880)="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", 0x1000, 0x7fffffff}], 0x80, &(0x7f0000001e40)={[{@block_validity}, {@errors_remount}, {@sb={'sb', 0x3d, 0x8}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2a0}}, {@init_itable}, {@nouser_xattr}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@data_err_abort}, {@jqfmt_vfsv0}], [{@dont_hash}, {@euid_gt={'euid>', r0}}, {@fowner_gt={'fowner>', r1}}, {@subj_user={'subj_user', 0x3d, 'h\xf5d\x9aerrors=\xb5\x83remo'}}]}) setresuid(0xffffffffffffffff, r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@initdev, @in=@local}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001980)={{{@in6=@remote, @in=@broadcast}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000001b00)=0xe8) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000001f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000340)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@rq}, {@timeout={'timeout', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0x3}}], [{@permit_directio}, {@fowner_eq={'fowner', 0x3d, r0}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '\\,]:'}}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}]}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file1\x00'}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x2, 0xfffffffe, 0x388}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) syz_io_uring_submit(r4, 0x0, &(0x7f0000000440)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r7}}, 0x10001) 12:13:42 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x1c}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 3288.000655] loop1: detected capacity change from 0 to 512 [ 3288.003061] blktrace: Concurrent blktraces are not allowed on loop14 [ 3288.006762] blktrace: Concurrent blktraces are not allowed on loop6 [ 3288.020586] EXT4-fs (loop1): unable to read superblock [ 3288.040519] blktrace: Concurrent blktraces are not allowed on loop14 12:13:42 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3288.074275] blktrace: Concurrent blktraces are not allowed on loop4 12:13:42 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x0, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3288.085299] loop1: detected capacity change from 0 to 135266304 12:13:42 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3288.134317] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 3288.155037] blktrace: Concurrent blktraces are not allowed on loop4 12:13:42 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x1d}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:13:42 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:13:42 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x500}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3288.236741] loop1: detected capacity change from 0 to 512 [ 3288.250518] EXT4-fs (loop1): unable to read superblock [ 3288.286998] blktrace: Concurrent blktraces are not allowed on loop14 [ 3288.348278] blktrace: Concurrent blktraces are not allowed on loop14 12:13:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x3, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:13:53 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x14, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) syz_io_uring_setup(0x4d51, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xd) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:13:53 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x600}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:13:53 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) 12:13:53 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x1e}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:13:53 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x400, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100e462d6950000010000ea", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:13:53 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x0, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:13:53 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3299.762800] blktrace: Concurrent blktraces are not allowed on loop14 [ 3299.764988] blktrace: Concurrent blktraces are not allowed on loop4 [ 3299.773541] blktrace: Concurrent blktraces are not allowed on loop14 12:13:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x7, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 3299.778558] blktrace: Concurrent blktraces are not allowed on loop6 [ 3299.786589] loop1: detected capacity change from 0 to 512 [ 3299.794491] EXT4-fs (loop1): unable to read superblock 12:13:53 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x700}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3299.833742] blktrace: Concurrent blktraces are not allowed on loop14 12:13:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:13:54 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3299.880089] blktrace: Concurrent blktraces are not allowed on loop14 [ 3299.936715] blktrace: Concurrent blktraces are not allowed on loop4 12:13:54 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) r3 = syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:13:54 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x21}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:13:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x10, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:13:54 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x1125}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3299.960814] blktrace: Concurrent blktraces are not allowed on loop6 12:13:54 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:13:54 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) [ 3300.006954] blktrace: Concurrent blktraces are not allowed on loop14 12:13:54 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, 0x0) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3300.060109] loop1: detected capacity change from 0 to 512 [ 3300.072389] EXT4-fs (loop1): unable to read superblock [ 3300.089448] blktrace: Concurrent blktraces are not allowed on loop4 [ 3300.117612] blktrace: Concurrent blktraces are not allowed on loop6 12:13:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x2000, 0x2) 12:13:54 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:13:54 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x22}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:13:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e13, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:13:54 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2b, 0x4, 0x0, 0x36f, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) pidfd_open(r3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x6402114}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c001db03bcb0231cb72f7d2100", @ANYRES32, @ANYBLOB="1d008d80734bc56d842c7dc791622f4d4230db608a2f001ae3040037000000003e01178008007800", @ANYRES32=r3, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) [ 3300.149067] loop1: detected capacity change from 0 to 512 [ 3300.152802] EXT4-fs (loop1): unable to read superblock [ 3300.171667] loop1: detected capacity change from 0 to 512 [ 3300.181599] EXT4-fs (loop1): unable to read superblock [ 3313.650712] blktrace: Concurrent blktraces are not allowed on loop14 [ 3313.667450] loop1: detected capacity change from 0 to 4096 [ 3313.671315] blktrace: Concurrent blktraces are not allowed on loop4 [ 3313.672679] blktrace: Concurrent blktraces are not allowed on loop6 [ 3313.693715] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 3313.709303] blktrace: Concurrent blktraces are not allowed on loop14 [ 3313.731211] loop1: detected capacity change from 0 to 4096 12:14:07 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xe}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:14:07 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x23}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:14:07 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) 12:14:07 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e14, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:14:07 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x2511}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:14:07 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:14:07 executing program 1: [ 3313.754250] EXT4-fs (loop1): VFS: Can't find ext4 filesystem syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001200)=[{&(0x7f0000000040)="7de14ad34685c016283af645cd71be18b3af81400e700d8287de4a30502a48c7a0da2a961cdf22fb9696b8b50ad4fbcf397b7098b79d73f08f49463e3a1b19725e9ff242e4abd3792465901bf0caef07060bdea8daac3302ac8eda68c51f2481fde34e2d5c246265d64ab63e9cfdf520ff7af5d630969fdc563f0c9048663e", 0x7f, 0x9}, {&(0x7f0000000140)="3343f98c72000b463d11d49488c82a29faa336cb641242177350ad010de9bda68b8f33cf85b8544593506ba534c00b157797b411ede08709bb0f802d19c4f16d852b5d3795aed45ef1a3e50b8fdfbe66a0ca6303c3557b10bb9858cd89a1f7138ca92465bcb8b802fac17e8ba6b710dca632f43436fe2ef1a2ab8f98b85ce7f61a6a0ec7693b43d9c0bf7b08b33fb3e0fed50b629124551ee83a", 0x9a}, {&(0x7f0000000200)="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", 0x1000, 0x7}], 0x200002, &(0x7f0000000040)=ANY=[]) 12:14:07 executing program 6: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="f00000001a0008000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a00002000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="fc0200000000000000000000000000000000000033000000fe88000000000000000000000000010100000000000000000000000000000000000000000000000000000000000000000000000008000000ff0300000000000000000000000000000500000000004c0000000000000000000000e08b61207faf84e900000000000000000000000000000000000000000000000000000027bd7000093500000a00030000000000000000"], 0xf0}}, 0x4001814) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)={0x254, 0x0, 0x163183a5200b6def, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x28, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_EEE_MODES_OURS={0x118, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x2a, 0x4, "2cb15a963f237cdcc76d65e7fc7d05c4fb44c2e10e7f952f9162f8dc574959b6d14c8499d55b"}, @ETHTOOL_A_BITSET_BITS={0xe8, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!{-\\&\x8c\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/ptp0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sg#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/sg#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{--,})\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x5}]}, 0x254}, 0x1, 0x0, 0x0, 0x50}, 0x4144) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x400000, 0x2eb}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:14:07 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:14:07 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:14:07 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) 12:14:07 executing program 1: rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x2010, &(0x7f0000000040)=ANY=[]) [ 3313.847356] blktrace: Concurrent blktraces are not allowed on loop4 12:14:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x103}], 0x20, &(0x7f0000000040)=ANY=[]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0xb, 0xbd, 0x80, 0xe9, 0x0, 0x7, 0x228, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x3b, 0xf71}, 0x1400, 0x5cb7, 0xa7, 0x6, 0x4, 0x3, 0x7, 0x0, 0x8, 0x0, 0x4}, r0, 0x2, 0xffffffffffffffff, 0x2) [ 3328.398939] blktrace: Concurrent blktraces are not allowed on loop6 [ 3328.401964] loop1: detected capacity change from 0 to 512 12:14:22 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0xe0ffff}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:14:22 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xd}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:14:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e15, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:14:22 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x24}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:14:22 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) 12:14:22 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:14:22 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x1401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) r1 = syz_open_dev$sg(&(0x7f0000000180), 0x80007ff, 0x400000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000001080)={0x0, 0xfffffffffffffffd, 0xfd, 0x0, @buffer={0x0, 0xe5, &(0x7f0000000dc0)=""/229}, &(0x7f0000000ec0)="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", &(0x7f0000000fc0)=""/90, 0x81, 0x20043, 0x0, &(0x7f0000001040)}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000001180)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000001100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x1}, 0xfffffc00) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r5, &(0x7f0000000540)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r0, 0x0, &(0x7f00000006c0)="3f2bd7edb588ad670871bc11b4efafa86e6a7b2deeaf1c49908626c4dffd38167c0b6abf623d930c4c6ff1b4a665296f548078e1ec0f1e7afe4372de0ec6e4bae06ed781368c9e893ec1bd27ca562efce94927193912c9c425ac852bd9fa8e0bf091e050b7e12f0409f83ac664e8d85b551fe5d7b65ca195fa98c6b55f7c7b725974e14e743c02b2e6d3f521780bf64db83aea45d24574cf81aad71fd7a1061da22808b460e6692064e1547935f697d0bfc886b866a20af91301a6acfe914d027ccbb5a657d26ec093809af4a0b770bf6d5f76", 0xd3, 0x0, 0x1}, 0xb) r6 = accept4$unix(r0, &(0x7f00000001c0), &(0x7f0000000080)=0x6e, 0x80000) readv(r6, &(0x7f0000000240)=[{&(0x7f0000000340)=""/166, 0xa6}, {&(0x7f00000005c0)=""/79, 0x4f}], 0x2) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) [ 3328.420522] blktrace: Concurrent blktraces are not allowed on loop14 [ 3328.428611] blktrace: Concurrent blktraces are not allowed on loop4 [ 3328.449291] loop1: detected capacity change from 0 to 512 [ 3328.489545] blktrace: Concurrent blktraces are not allowed on loop14 12:14:22 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x25}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:14:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in6=@private2}}, &(0x7f00000000c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20020, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, 'ext4\x00'}}], [{@uid_eq={'uid', 0x3d, r2}}, {@subj_role={'subj_role', 0x3d, '\b\x00\x00\xa0P\xf0jd\xd8\xd5\x9c$\xd7X\x8c\xd9)\xdf\xaa\x126]\xf9\xfd\x9d#\xa5\xce\x89-\x14=\xf1\x8bL\x01\xe6\\\x83\xd2wG\xc8\xf8\xef)_\xc4\xf5\x1d\x89%\xe1\x97\x11\x8b\t\xf7\x05\n?D\v\xdd\xae2\x1a\xcc\xd1\xc9\xb1\x0f\xf9\xbb\v\x04jB\xeb\xb2\x00\xea\xf1\xd9r\xa9\xc6\x89\xfe\xee4\xaf\x85k\xc1\xd8\xa9\xdf\x98\xb1Z\x80C[*\xb7\xa4W\x8e\xa38q\x12O\x86\xfe\xddH'}}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@dont_appraise}, {@appraise_type}]}}) 12:14:22 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:14:22 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:14:22 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000d00), 0x2000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000d40)={0x4, 0x80, 0x3f, 0xc7, 0x8, 0x3f, 0x0, 0x8001, 0x2020, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x9}, 0x10, 0x10000, 0x7fffffff, 0x0, 0x487, 0x5ac, 0x1, 0x0, 0x2, 0x0, 0x8}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) recvmsg(r4, &(0x7f0000000840)={&(0x7f0000000180)=@llc, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000340)=""/149, 0x95}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f00000006c0)=""/139, 0x8b}, {&(0x7f00000004c0)=""/61, 0x3d}, {&(0x7f0000000780)=""/106, 0x6a}, {&(0x7f0000000980)=""/202, 0xca}, {&(0x7f0000000a80)=""/158, 0x9e}, {&(0x7f0000000b40)=""/245, 0xf5}], 0x9, &(0x7f0000000800)=""/4, 0x4}, 0x0) [ 3328.594740] loop4: detected capacity change from 0 to 512 12:14:22 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x1000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3328.624911] blktrace: Concurrent blktraces are not allowed on loop4 [ 3328.630717] EXT4-fs (loop4): unable to read superblock 12:14:22 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x108009, &(0x7f0000000040)=ANY=[]) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004000)='./file1\x00', 0x165202, 0x70) clock_gettime(0x0, &(0x7f0000006bc0)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000006a40)=[{{&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000880)=""/116, 0x74}, {&(0x7f0000000900)=""/40, 0x28}, {&(0x7f0000000940)=""/253, 0xfd}], 0x4, &(0x7f0000000a80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/241, 0xf1}, {&(0x7f0000000c40)=""/255, 0xff}], 0x2, &(0x7f0000000d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000e00), 0x6e, &(0x7f0000004040)=[{&(0x7f0000000e80)=""/164, 0xa4}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/163, 0xa3}, {&(0x7f0000004000)}], 0x6}}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f00000040c0)=""/229, 0xe5}, {&(0x7f00000041c0)=""/69, 0x45}, {&(0x7f0000004240)=""/89, 0x59}], 0x3, &(0x7f0000004300)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000004440), 0x6e, &(0x7f0000005800)=[{&(0x7f00000044c0)=""/156, 0x9c}, {&(0x7f0000004580)=""/29, 0x1d}, {&(0x7f00000045c0)=""/3, 0x3}, {&(0x7f0000004600)=""/150, 0x96}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/89, 0x59}, {&(0x7f0000005740)=""/132, 0x84}], 0x7, &(0x7f0000005880)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000005940), 0x6e, &(0x7f00000069c0)=[{&(0x7f00000059c0)=""/4096, 0x1000}], 0x1, &(0x7f0000006a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}], 0x6, 0x40004000, &(0x7f0000006c00)={r2, r3+60000000}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000009480)={&(0x7f0000006c40)=@abs, 0x6e, &(0x7f0000009280)=[{&(0x7f0000006cc0)=""/248, 0xf8}, {&(0x7f0000006dc0)=""/209, 0xd1}, {&(0x7f0000006ec0)=""/4096, 0x1000}, {&(0x7f0000007ec0)=""/232, 0xe8}, {&(0x7f0000007fc0)=""/235, 0xeb}, {&(0x7f00000080c0)=""/249, 0xf9}, {&(0x7f00000081c0)=""/49, 0x31}, {&(0x7f0000008200)=""/4096, 0x1000}, {&(0x7f0000009200)=""/90, 0x5a}], 0x9, &(0x7f0000009340)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}, 0x1) mount$9p_fd(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x800000, &(0x7f00000094c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}, {@fscache}, {@cache_mmap}], [{@subj_type={'subj_type', 0x3d, 'shortname=win95'}}, {@uid_gt={'uid>', r4}}, {@euid_lt={'euid<', r5}}, {@smackfstransmute={'smackfstransmute', 0x3d, '+$-Q{--'}}]}}) umount2(&(0x7f0000000680)='./file0\x00', 0xd) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xffff, 0x9, &(0x7f0000000580)=[{&(0x7f0000000140)="e66b7d13cf72f0a2a0bef64c7bef17046f26f2f47bddbc3265f6ffa624aef1436e9c218c061f9de1202722bbe390d8ea3b0df6863a32b6d5dca99a053e8641abc4f74b8ac3fd3029b91e8a4e49af8513407b0a0b6f811047e7a74aebda6f8e441ff407aac2d06cd07f3dcbc7a114025bdbae760546373308daa6456f5b6dfca463500d71c0012063856ab2d0e81eb6bfe2f88f480a30569653576cd4937062b2958ac4f315e79523", 0xa8, 0x3ff}, {&(0x7f00000000c0)="724c04727241b0fc0a22ef9c758b1813aca052a17f6912eb6f2841f92fd9", 0x1e}, {&(0x7f0000000240)="3fe888802a02fc7eff072f4b95355d62ac5aa34a6ad38f3651661e3cbf2e2c47e98196a0cc", 0x25, 0x2}, {&(0x7f0000000280)="30f41277d59aed1744b10d382a942703e8c34a1dfece79522d494393ec6c31a3486ceda032b63227ca5c56e30106eb0f86ef79ef78efd9ccaac11905ab16b9defb70fbc554febefdaac0d08da1171a8f42d180aa1c4546721bb44e47a4524e4fef8186cec32390e4d6c4dcca5bcc5a4c3c5e8996c3f5e5beba6e95bdea301e237c36375dca4f61f12afe04d4e98ea946a311c2f371d7fe3674e91599b466f66202491bcc6c16e1b9cabc2ddccaab3db9689393f1aaaa2a64603e20fa2d357adda0fbf9f02ef32d2f85c10836a9c8d22a738c8cb353d07bf728528f897d", 0xdd, 0x1ff}, {&(0x7f0000000380)="33b3bcb3129ac7afed655c05e3de91102fc07535915d544629c3c4def34327ec9459232a8b1d171c685cdb8ec893dd5421e92071b106a7b66c1d49e2ac47d01db373ede7eb9a8d67315d19ec5736d3cceee7b906729a1bc0c438760b02aad263776cdbbbc75a929c4b5bccad6152b63dd61a96fc2f9135888297a2", 0x7b, 0x3}, {&(0x7f0000000400)="be96a4664b147941446b5f4300291a8f8bfa72ce0dca697bd9437e2677e31d077a9dff6ea7253e14aab669ee32a6f9fbf66985457fad85f4d0660ff31d", 0x3d, 0x9}, {&(0x7f0000000440)="adf4e2016e72ca2c1454bd2ba5a52bbc20eaa045642b6300c229e7f62c0153235609e3f1e2e7322df8089a729ee12e05db0d18e09c338dac16d93b2dc7107146495f7fba49d437eb2320d29f874f23754d5d3ab15872ed7801f10816c44785101173b975c8375034f423f6b648bfa017362bc809ae7d0e32a6c9c4492b19a08a6d02c188014107eb30599ddd76ea66eba2bdb2c693774f049176", 0x9a, 0x4}, {&(0x7f0000000500)='9', 0x1, 0x9}, {&(0x7f0000000540)="690444052279e70db3797c50df2436eda4551acba4355a255d8b6b5aec2f433fc60f3086022a91d27cb7c2", 0x2b}], 0x20, &(0x7f0000009580)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c61756469742c7065726d69745f64697265637400000000390913af624063316663917ed715910876a47756f12df6e835c5197924220051452a7a9e946eaf765619904130f4ce91b4f8be30804286714dd8c1d07bcea9ec25c00a23836aa90898bd297d3240a4ef2087c295f15da757d156f7e9f17023e7473c3e4e87fd0d01ec7d91544d5fc781f2f6390393a9b4fed28bd5427b81b9ef57d21cd7fbd4135db704c4a0c5f8b38fdb9dcf770ae60fa876bccc7ebed2194b18ca5059b98f2c0718dfd21a7d1655f26558fe"]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) openat(r1, &(0x7f0000009680)='./file0\x00', 0x20040, 0x146) sendfile(r6, r7, 0x0, 0x100000001) ioctl$BTRFS_IOC_BALANCE_CTL(r7, 0x40049421, 0x0) [ 3328.694119] loop1: detected capacity change from 0 to 512 [ 3328.700227] 9pnet: Insufficient options for proto=fd 12:14:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000002}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 3328.723021] blktrace: Concurrent blktraces are not allowed on loop14 [ 3328.736916] loop1: detected capacity change from 0 to 65024 [ 3328.835888] blktrace: Concurrent blktraces are not allowed on loop14 [ 3329.022907] loop1: detected capacity change from 0 to 512 [ 3329.035055] 9pnet: Insufficient options for proto=fd 12:14:36 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:14:36 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) 12:14:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000003}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:14:36 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001e00)={0xdcd, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:14:36 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', &(0x7f00000000c0)=""/3, 0x3) r1 = syz_io_uring_setup(0x4d50, &(0x7f0000000140), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x81}}, './file1\x00'}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000240), &(0x7f0000000280)={0x0, 0xfb, 0x73, 0x6, 0x3, "34aeec5e3f4da03585fcbebe976f320b", "7ab560b417de16abcf2f34e4c9b71891dd0eac59ebb27f2545cb733376713600f003814cc2ab91d6899049a31f12839ab86a303b53f2a2757d9d2d5e34f0ea39fde5e2174dfa5eec48d29615975069d6f551045dd57fbc09e6d1c78d651c"}, 0x73, 0x4) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000140)=@vsock={0x28, 0x0, 0xfffffffe}, 0x0, 0x0, 0x1}, 0x200) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x8}}, './file1\x00'}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x2, 0xfffffffe, 0x388}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0xa, 0x0, r11) syz_io_uring_submit(r2, r7, &(0x7f0000000500)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r8, 0x0, &(0x7f0000000400)="c12a319c477ea2319e9774bf310c89cd916278aa819c78095ef99c758ddeb4560ef34d063389f1f72b2dd33a3d80328b6c5c7caeaaf1e6a3e768f168edc3a2bdbe1cd24054667d9ddbac26da8e8e3564496c5f660caefa4752676cc14e3cd28b03455756a16326786c42095f51553c6edc539d58cf01504f4c85d3a7ae6d7a2b953219aff0c463d531d0eede5762586d18b12435dc8c4a6940d12a9e0bcd25f3839ef7e2a5e3adaac05bfeed6306acd5cbd03bcf074806dda924d68d5d793e2b57d6279d2bdcb630a1915f4dcc4ad7166b", 0xd1, 0x20048010, 0x0, {0x0, r11}}, 0x7) 12:14:36 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x26}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 3342.590561] blktrace: Concurrent blktraces are not allowed on loop4 12:14:36 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x2000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:14:36 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 3342.638022] blktrace: Concurrent blktraces are not allowed on loop14 [ 3342.647034] blktrace: Concurrent blktraces are not allowed on loop6 [ 3342.654903] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 12:14:36 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) [ 3342.715087] audit: type=1400 audit(1751199276.875:15): avc: denied { map } for pid=16193 comm="syz-executor.1" path="pipe:[57584]" dev="pipefs" ino=57584 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 3342.755791] blktrace: Concurrent blktraces are not allowed on loop14 [ 3342.756424] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 3342.760810] blktrace: Concurrent blktraces are not allowed on loop4 12:14:37 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:14:37 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x27}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:14:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe000000c}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 3342.959577] blktrace: Concurrent blktraces are not allowed on loop6 12:14:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000010}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:14:50 executing program 1: splice(0xffffffffffffffff, &(0x7f0000000040)=0x10001, 0xffffffffffffffff, &(0x7f0000000080)=0x6, 0xe9, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) 12:14:50 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2}, 0x9) 12:14:50 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x1}}, @l2={0x1f, 0x7, @none, 0xf91}, @phonet={0x23, 0xe1, 0x1, 0x6}, 0x6, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)='veth0_macvtap\x00', 0x4, 0x4, 0x58ca}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:14:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000003}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:14:50 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x28}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:14:50 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3356.402362] loop1: detected capacity change from 0 to 512 [ 3356.404065] blktrace: Concurrent blktraces are not allowed on loop4 [ 3356.415599] blktrace: Concurrent blktraces are not allowed on loop14 12:14:50 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x3000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3356.432696] EXT4-fs (loop1): unable to read superblock 12:14:50 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2}, 0x9) [ 3356.465607] blktrace: Concurrent blktraces are not allowed on loop6 12:14:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bfs\x00', 0x10801, &(0x7f0000000140)='\x06@^%{\x1d!\x00') [ 3356.488700] blktrace: Concurrent blktraces are not allowed on loop4 [ 3356.508899] loop1: detected capacity change from 0 to 512 [ 3356.518304] EXT4-fs (loop1): unable to read superblock [ 3356.523586] blktrace: Concurrent blktraces are not allowed on loop14 12:14:50 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x29}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:14:50 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2}, 0x9) [ 3356.570539] loop1: detected capacity change from 0 to 512 [ 3356.572930] EXT4-fs (loop1): unable to read superblock [ 3356.579681] blktrace: Concurrent blktraces are not allowed on loop4 12:14:50 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:14:50 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000340)=[{0x0, 0x0, 0x101}, {&(0x7f0000000240)="d61bf14f76c4bc56c26d5d45fe575b9a91cb8cc9a55e6c75f2b8de93d70a8ecb0182e042c371657390d5fccab64fc6edcf366a7905ec792255a0488dff96a0e2aa109adf314530f1a9f0eb371facfd93284ba8ffda1fa66793d334f7c766dfc00321370b7ed6014cefd07ec03ec60843ef611686757f58d0d62b429fd3d356637c94417cbcc9edd522d011a05f911c7dc9c715d72227c7f616b65288756baeb9c3ed8c60e754cf620ea4e48345837e5c6a79fbad0b5e2b46286f214447e27e425ac9121dd6", 0xc5, 0x3c}], 0x1b40000, &(0x7f0000000040)=ANY=[]) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="34f7fffffffbffffff"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x1024520, &(0x7f0000000140)='ext4\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x68000, 0x5c) getdents64(r0, &(0x7f0000000380)=""/124, 0x7c) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) lseek(0xffffffffffffffff, 0x7f, 0x1) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 12:14:50 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(0x0, 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3356.624303] blktrace: Concurrent blktraces are not allowed on loop6 [ 3356.637059] loop1: detected capacity change from 0 to 512 [ 3356.658744] loop1: detected capacity change from 0 to 512 12:14:50 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x4000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3356.712785] blktrace: Concurrent blktraces are not allowed on loop14 12:14:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1f, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000240)="4ce93e6d9445b2e2feb9707ff4aa88c19775394eb7a9088bc231dd2e3e5ad9e7ba00ca636a0aeeb1846f9c27c74e75712e214a29cc831fbdf847e1143354400baa381057c709f502e407d050db9b41a343eddaac8af22bbfc4a19f69b4f629e215bfeb7a041c45065b7f130f548c97a4efb95c8d20f74630db034ae60fcc890de09db3149eadcbaa973abd92e8208a4d7558b9d84de7fca7d58f320d4449157b0c1915e6bfd049ebc2faab0cd7798e9f1292cd6cea68433a85cc0fbb095d68a872975ec8491df0a146b485", 0xcb, 0x9}, {&(0x7f0000000140)="fc109257ed1cb0797b0eb916b0bf3eac760dd7b3ea603e455f81f7212c5eed3301ac72940c57a4275bda67d74d1f401f24e4196db1b849f39f405a70b59293b2c8ff70b57cbe61d5babd6fc42848ff5e7e7c3d19c08f01418aae056a9d78ba8d562d", 0x62, 0x101}], 0x4, &(0x7f0000000340)={[{@utf8}, {@shortname_winnt}, {@nonumtail}, {@shortname_win95}, {@shortname_mixed}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@permit_directio}, {@hash}]}) 12:14:50 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 12:14:50 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000a, 0x20010, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x6, 0x0, @fd=r0, 0x100000001, 0x0, 0x7, 0x1, 0x1}, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) [ 3356.744066] blktrace: Concurrent blktraces are not allowed on loop14 12:14:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000600}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 3356.769328] loop1: detected capacity change from 0 to 512 [ 3356.774727] blktrace: Concurrent blktraces are not allowed on loop4 12:14:50 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(0x0, 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3356.795919] EXT4-fs (loop1): unable to read superblock 12:14:50 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x2a}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:14:50 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) 12:14:51 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x5000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:14:51 executing program 1: ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) [ 3356.870050] blktrace: Concurrent blktraces are not allowed on loop14 [ 3356.874688] blktrace: Concurrent blktraces are not allowed on loop4 12:14:51 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7a, 0x100, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) [ 3356.936650] loop1: detected capacity change from 0 to 512 [ 3356.941531] blktrace: Concurrent blktraces are not allowed on loop14 [ 3356.948600] EXT4-fs (loop1): unable to read superblock 12:14:51 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x2b}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:14:51 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(0x0, 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3356.966929] blktrace: Concurrent blktraces are not allowed on loop6 [ 3356.973576] blktrace: Concurrent blktraces are not allowed on loop4 [ 3370.575040] blktrace: Concurrent blktraces are not allowed on loop6 12:15:04 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x6000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:15:04 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001340)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003e00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xff, 0x0, 0x40, 0x800, 0x3, 0x3e, 0x6, 0x105, 0x40, 0x0, 0x0, 0xff80, 0x38, 0x2, 0x2, 0x5, 0x6}, [{0x6, 0x80000000, 0x0, 0xfff, 0x0, 0x7fff, 0x80000001, 0x4}, {0x4, 0x3, 0x0, 0x93a, 0x0, 0x8000000000000000, 0x2}], "97", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8b1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:15:04 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:15:04 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x2c}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:15:04 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x2, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:15:04 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(0x0, 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3370.581831] blktrace: Concurrent blktraces are not allowed on loop14 12:15:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001c00)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r3, &(0x7f0000001bc0)={0x80000003}, r2, 0x3, 0x0, 0x1}, 0x5) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000001c40), r0, 0x0, 0x6a4, 0x0) socketpair(0xb, 0x1, 0x8, &(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) r10 = syz_open_dev$sg(&(0x7f0000001980), 0x81, 0x40000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001c80)=ANY=[@ANYBLOB="000400000000ff0f18000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="300000000000002d050cae0155c3c9ffe527530700000000000000099f03ab65fae07d0ba87f5069a3c82da5bf9c1b18e8e383fbcf79586532ee8000"]) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000001a40)={0x4, &(0x7f0000001a00)=[{0x7, 0x20, 0x70, 0x3}, {0x400, 0x1, 0xae, 0xfffff1c4}, {0x1000, 0x0, 0xff, 0x3f}, {0x1a4, 0x0, 0x5, 0x3f}]}) sendmmsg$unix(r1, &(0x7f0000001b40)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000140)="1da228c4f905c85dbb006f0e33d63b31531944333ac9b424a2a600f2b2c79c6fcc69c49a245013dc38739ad23bf4f6216ba01b5f6e3bd06f0f993d6082d89e0362f8d736f2267a2c51c3f748574417f5439612dbf8464e505fef56672edce9d8d84a66517d7242fe5db1c24ff3de8df95e1cb17e9550cf51e4d68af46ef07d1ba3317ecc35618f3163d13350a9ac900d678bf409baf162acc6c5c6d4beee037e53d40ff4ce41568e", 0xa8}, {&(0x7f0000000240)="ff745732ae7de0a5c79d873caaf3c93133f08e5819cab6cb9d50524a6e62c624f0579b7a97a153ea1a4d2dece664904a3e20644160d8614467c787894e717816bab93086241a79e6b3443ba5b33be841396a6e359e3c054620001d503b9ab266e8a3efc95e9ccf7e5e8c30dc55af497e0fd4e0cf1308380cc59990ccc3d3aeb57c70ad223270ee50f2dc015c356b79a64ce9ab85009dcfad0ed1b6fa89ee4af770fff7174875748279102ae4c8ba78dd9892b06855afd9e17f081052b245d8a3f453ef0e0349236aed68", 0xca}, {&(0x7f0000000340)="499e36f1bb7990d23d8ff13ffccb78779ad6f6b9dc9ba4d72326ffb90726ee700abccb00c5101ff9806dd2a2b184668b4805c714a76928d6c669136f9154d5a53266f148095f40e48bee92036eb7a4f2edb9ea0b476db6896d2580f9815fc8289888fa21fa42ba9719e15b11a42a4d36dfeb95e61a94e63bb5eda640b2feb5790caf0942642ed9ecc9d5984db55e3677a044182c674bfc65512a5af8bfb9c60206489bbe1ed293706cbabf3538e71f8f2673f780d05e", 0xb6}, {&(0x7f00000000c0)="42f81624c90cee8f85078b21e618e2", 0xf}, {&(0x7f0000000400)="6e68980a90a5f22aba2c82b8819871191cab86685990bce1edc7de9f35eb9e387c7ed9889fc92a87106ecee2bc6ef30d1c48bc34f45945cb56bcef5fdb", 0x3d}, {&(0x7f0000000440)="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", 0x1000}], 0x6, 0x0, 0x0, 0x40000}}, {{&(0x7f00000014c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001540)="fd51faad8c52ee08f128018fe4679bdebdcb380c62bf0799c6ff0b13381cca088c6f3c57d1953589d0e812b408ba3cbf2d6807e48884765ba9d1636cbfae71995303b7ec6a56acf7730b65e80f00ab3e7608f4f3d490f8dcb236e7739a4fa306e1ec2afbf2e91f1506912e8e2d8061819fa001f519f92005881a740272116b4da6c00ec8e0d9461b71ef3ea45f7a28d916ab34040fd79796e0e9d0825ccace4245a1d6104c1ba8f7f58bbaf4d1b0cc10a8db6ebb3ec5f6a03152334f276770b83badb5a266131b4bba5a85a98655", 0xce}, {&(0x7f0000001640)="dfdcd9e1da6ae0a71f224762ab72f22a51cba340de7e1d0b84bd08c6332ff44e8e4957560d7de3b219e42f8ef8ed20492ce8032ced8e08af57bca13cca66f1fd89cc682eecda855e1cb35ed292098b5f9819d9da242a66b38142cf33b86069589891ff6da124e75541b25ad9e21d7061f2fc1a1bdceaa538146ffc6bc6c161a115d9d1a9904f3a5c02da5d1b030485727d164baa", 0x94}, {&(0x7f0000001700)="d9a0d605cacd5a2bbbba3002cc3f1c06a2b743c4c99581cffbb8e683bc1cb5798bd3bb33cec303f6794d3cf9f05a1a0e00de32d480d2d11af40355c53561edd3c2ef734ae674050486a5407dfb0cfb9d4ec3c8d0bd5dae73f8f1611338ee182e4c13401d82417679278526818e6d1a14cb2b0cb4d56bd173e23be7285095c327100b2329f63af99c5c5e34a2cfc40da30e2e98c93a893c8dffb71852ba85189ef8c107b7cf4238b993c3d6796c945e0fdc62a910cee088de038ad5444c49bb7712d2cfb925b0d942d6f92fb455d96731877e568dfec6162959befd2d48de1b6c3ee0ad81fb", 0xe5}, {&(0x7f0000001800)="e16d8cf3672e5c213d8ca75ed25595bfb29cc26624989841625e92bec4b7e2c251ab89780ab21ce0e5e4b40f2295d5e69af712029802c9edefb56c4c7e0554ae38029c6e0832775e4bee3f7ae13f5d57fa3139a64f9d528e1a66c641d52b104722e8f72a562d3ea009a9620e9a8a7ae6f0b1a132661a22012e7d52f5511fde4d14fae67b0d58f4a048c116b22eee8e", 0x8f}], 0x4, &(0x7f0000001a80)=ANY=[@ANYBLOB="000100"/16, @ANYRES32, @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32, @ANYRES32, @ANYRES32=r11, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000001000000", @ANYRES32=r12, @ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00'], 0xa8, 0x1}}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) 12:15:04 executing program 6: sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1bf8c10fc63f67e5"}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="010026bd780028404c741c280e00b34c88081f69dbdf253700000600000000000000831ecf0003009a5065e5a88cbac750b916e82db4392fd280d1659673e2213392e258d8bc2eb2e59f1ec12cc8c508138f980d90d002fbc72f5b94304ecf0b827fc2f8f6a861fb8790ab593961753c37dbe5a366e54a8c9e51b6401d8e5a76f5bd091478ce905d39ba67f7973e4ca9f160e820aeed29f491ec7d2f5a639f69d0d8bd1f3c4904624f3e756893b230eee2ba5eb19d81d805c08ec75ed6ac1f4f7a436675582b49e6765c334df0e21af6a28a3727d96a6a3f3a563c3a7728f71fa7ba8d50f7e7184bf432afe83fc36a7e5f17c18c66c3bfaff404c476b2ffdd7b5a3d585cfeef0ca09fbe6ad4bc41b4e0", @ANYRES32=0x0, @ANYBLOB="08005700030000000800a000810000000800a0000700000005001801020000000800a1000100010008002700030000000800a000000000000800a0000100008008002201fb020000050019010d00000008005700ffffff7f080057008100000008009f00060000000800220136010000080026006c0900000800a100ff0700000500180105000000"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3cd2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x102}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffc}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4044) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x6009c1, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:15:04 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x3, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 3370.653299] blktrace: Concurrent blktraces are not allowed on loop14 12:15:04 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:15:04 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x2d}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 3370.784442] loop1: detected capacity change from 0 to 512 [ 3370.799736] blktrace: Concurrent blktraces are not allowed on loop6 [ 3370.860984] EXT4-fs (loop1): unable to read superblock [ 3383.303570] blktrace: Concurrent blktraces are not allowed on loop14 [ 3383.312126] loop1: detected capacity change from 0 to 512 [ 3383.320600] blktrace: Concurrent blktraces are not allowed on loop6 12:15:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/74, 0x4a, 0x0) 12:15:17 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x7000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:15:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x4, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:15:17 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) fallocate(r1, 0x6, 0x4, 0x7) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x40, 0x0, 0x0, 0xfffffffc, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:15:17 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:15:17 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x2e}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:15:17 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:15:17 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd, 0x1}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = fsmount(0xffffffffffffffff, 0x0, 0x31) accept$unix(r3, 0x0, &(0x7f0000000040)) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000140)=[{&(0x7f0000000240)="4102112c33a90f6f33e25d24d240958392318c9c75e46cce8f2379a87cffe469568bf7c331164dbb1ae789eff85f488b8fb519d043306038bed058c5f5cee57e5086442d373c1bcbd8b619503c8ca2f641250e605030f0a2ca1e37760212b76176a695428dd14e73845ce674b17b0f9f5cf3a403f725b172d0fa51df637399bd7616dccefbcba71917fd0ec236452da6b95c42bc462397fe64d3697a50c688a7eea52965313a22116fcaaf816e50ec1da33ca7c1756bf54b9f7f6d27c298ae0236eb8ed562", 0xc5, 0x9}], 0x0, &(0x7f00000003c0)={[], [{@seclabel}, {@uid_eq={'uid', 0x3d, r4}}, {@pcr={'pcr', 0x3d, 0x11}}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x8000}}, {@subj_user={'subj_user', 0x3d, 'ext4\x00'}}, {@dont_appraise}, {@dont_hash}]}) [ 3383.333752] EXT4-fs (loop1): unable to read superblock [ 3383.335015] loop2: detected capacity change from 0 to 512 [ 3383.355796] EXT4-fs (loop2): unable to read superblock 12:15:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x5, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:15:17 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x910b, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:15:17 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3383.437141] loop1: detected capacity change from 0 to 135266304 [ 3383.444150] FAT-fs (loop1): Unrecognized mount option "uid=00000000000000016877" or missing value 12:15:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/74, 0x4a, 0x0) [ 3383.539556] loop2: detected capacity change from 0 to 512 [ 3383.575578] EXT4-fs (loop2): unable to read superblock [ 3383.605999] loop1: detected capacity change from 0 to 512 [ 3383.609403] EXT4-fs (loop1): unable to read superblock 12:15:29 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x910b, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:15:29 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x2f}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:15:29 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xef}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xe1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x880) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x5) 12:15:29 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x490, &(0x7f0000000880)={0x0, 0x6a2d, 0x20, 0x20000001, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x0) 12:15:29 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x25110000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:15:29 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:15:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x6, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:15:29 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/74, 0x4a, 0x0) [ 3394.961868] loop1: detected capacity change from 0 to 512 [ 3394.965051] EXT4-fs (loop1): unable to read superblock [ 3394.979312] blktrace: Concurrent blktraces are not allowed on loop14 [ 3395.005289] loop2: detected capacity change from 0 to 512 12:15:29 executing program 1: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000240)="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", 0x1000, 0xfffffffffffffffd) r0 = request_key(&(0x7f0000000180)='.dead\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000001240)='syz', 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000200), &(0x7f0000001380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$update(0x2, r0, &(0x7f0000001280)="e783576aede5c95269adf186ef184f6c98c0698d38cf5db62bd44408f9d0b70529dc4a5a13781aae650a056b012d64ffeb78b0fb0acb660295f6fb1eec21faee40ab0ce4b4b27b803cf8f7b5414ddd8a7f382574ebc59e31e7bcec2366b3010f2a68bd09fce5f16c0add2305e40e71437f617faf8b2797594a0138fae3032fad545535d6b01a9bebd2a9627a9a0529603d1a3c01fb43c84c3627ccd117ddca3f220dc7fbd29aba9411a25bebce86c64ad04b0581fa767f8fa6ce81fe600aa5df1dda0db0c9", 0xc5) add_key$keyring(&(0x7f00000013c0), &(0x7f0000001400)={'syz', 0x1}, 0x0, 0x0, r0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000040)=ANY=[]) 12:15:29 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3395.045516] EXT4-fs (loop2): unable to read superblock 12:15:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x7, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 3395.060484] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 3395.121536] blktrace: Concurrent blktraces are not allowed on loop14 12:15:43 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x910b, 0xb91}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:15:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x8, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:15:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/74, 0x4a, 0x0) 12:15:43 executing program 6: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x1, 0x40100, 0xb91}) syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="f00000001a0008000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a00002000000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fc0200000000000000000000000000000000000033000000fe88000000000000000000000000010100000000000000000000001000000000000000000000000000000000000000000000000008000000ff030000000000000000000000000500000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000027bd7000093500000a0003000000000000000000"], 0xf0}}, 0x4001814) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="600000d61941a9de1c21683c495a57eb59641000b830cfacbe1478d7d9382977b89841325ac186788310ce94bb10b93fc292bf17383b0c86c5d26a840fa84f29a91b68ee7a831ba477abd9b705c7e38bd86deeaa349399784d035df705031119d6eff14ee054b32520", @ANYRES16, @ANYBLOB="000125bd7000fedbdf2502000000080009000400000008000700", @ANYRES32=r0, @ANYBLOB="08000400ffffffff08000200010000000c0003000000000000000000080008000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000800030000000800080002000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000050}, 0x20000000) ioctl$PTP_PEROUT_REQUEST2(r1, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900)=0x0, &(0x7f0000000940)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r2, r3, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x4a080, 0xb129480c112bf20b) 12:15:43 executing program 1: r0 = syz_io_uring_complete(0x0) fsetxattr$security_evm(r0, &(0x7f00000000c0), &(0x7f0000000080)=@v1={0x2, "8d5588b2ced6f76bf6046d9cbc"}, 0xfffffffffffffef0, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x2, &(0x7f0000000040)=ANY=[]) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x2203, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x2, 0xfffffffe, 0x388}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000140)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000140)={r1, r2+60000000}, 0x1, 0x0, 0x1, {0x0, r5}}, 0x400) 12:15:43 executing program 3: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0x30}) syz_open_dev$sg(0x0, 0x9e, 0x4a4043) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:15:43 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0xffffe000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:15:43 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) [ 3409.375840] loop2: detected capacity change from 0 to 512 [ 3409.384801] blktrace: Concurrent blktraces are not allowed on loop14 [ 3409.389640] EXT4-fs (loop2): unable to read superblock [ 3409.408359] loop1: detected capacity change from 0 to 512 12:15:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x9, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 3409.427018] EXT4-fs (loop1): unable to read superblock [ 3409.473539] loop1: detected capacity change from 0 to 512 [ 3409.483179] EXT4-fs (loop1): unable to read superblock 12:15:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0xa, 0x0}, 0xe00}], 0x40001a9, 0x0) 12:15:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/74, 0x4a, 0x0) 12:15:43 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0xe0ffff00000000}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[], 0xf8}}, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:15:43 executing program 5: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/23, 0x17}, 0x40012142) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) syz_io_uring_setup(0x745f, &(0x7f0000000180)={0x0, 0x52e4, 0x1, 0x3, 0xa0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x9e, 0x4a4043) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8010) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc4c03d09, 0x0) syz_io_uring_setup(0x48d, &(0x7f0000000880)={0x0, 0x6a2d, 0x4, 0x0, 0x2eb, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000900), &(0x7f0000000940)) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000006c0)={{r2}, 0x2, &(0x7f0000000100)=[0x40, 0x6], 0x8, 0x0, [0x68bb, 0x1, 0x5, 0x4b]}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040800}, 0x40000) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000540)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000500)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x301000, 0x80) 12:15:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x12, &(0x7f0000000080)=[{&(0x7f0000000040)="62e03fc7af6bf5da3ec96cc78cdc61db7059aa0d2450c5e475f3952037d5188b3bacca300dea2e8ae71f9254f22273ea608d0bfa411825920596118608", 0x0, 0x3}, {&(0x7f0000000140)="9b818b6a69057f5a6c666794a1bf035518c45faa35fb5e02aa138baee2e8523602bcfe2701887599ddab8b08c035d308e7a0b4ef9c5f2a43a71ba698bc68be5bd96ed5d7a89d3ba6875a9c6f3655d4be547d04d41d10f80b7be00416ceb9ed1455a9c57130df7ebeb77084a7895420a52b9530ca8407ad93c20bbc9aac506297d6ea8a6b7d7c5e5b1a2d17caf43ea133317d622f156aa0cb96359079b23f22e949a924d0db988d8f1884e0beac6161962e4d28044a226a07bcf8dce1764091b98f8973717e5a65f3825971430a7affe7ba0134e0277888c43b", 0x0, 0x1}, {&(0x7f0000002340)="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", 0x0, 0x200}, {&(0x7f0000000240)="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", 0x0, 0x3}, {&(0x7f0000001340)="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", 0x0, 0x4870}], 0x0, &(0x7f0000000040)=ANY=[]) syz_mount_image$tmpfs(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0xff, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000440)="57d1f68a3c3a8e4d6d99c7f4986b6681a5972a5b129a3c144021152b2e110feb43f90db778f0304dda8052af9c2705d88fa107ee33479113f3ebce1beaa193a9508d3179f59a8d12651713a1f6f1f350a4d985bfff84d0f58b0ba11668748f4e29d5c1302afd2ef6e8eaa15a7aa63af354", 0x71, 0x90c1}, {&(0x7f0000003340)="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", 0x1000, 0x6}, {&(0x7f00000004c0)="44b0e6f85b390b6de8cea98a5c6d10795b22e2a9acbae162f540af6eeb48ac4b91f1e34771c287fb2edfc3f453", 0x2d, 0x9}, {&(0x7f0000000500)="2ec7de55c0bd3e0efdfa20facbde1580fb57e33ca2639af7cb66e2623a2037acdc32ac0496f3c0aa40fe236f58f451bded250abe8621dd0467c49f2707ce67d18592b994df90bb3c2e079eb4fb638db451fcfaae793e96b1573569d51ae8a98286c8f6801d1054190e58b9cacc6c", 0x6e, 0x6}, {&(0x7f0000000580)="090a44914f377441b6607948d3bf17c8c60fd31302e0ff8f8717109954e5514a8cc9b94c42a8885f76c93a3a7641133d1ecde7a8cd255ddebd830e6923b6265d25b8be7c0a29fa48ce7ee67afa369e6a", 0x50, 0x100000001}, {&(0x7f0000000600)="33c4b2e6ef9d34b8de16ad448d6325426a9902fc77cb5ba7254d6b18d70d6214430a0fe047195c3fe0636bc0e0a3bfa77ad475608c10f53ca63d4e335be42beb726c83ce60ff34df585b1dc6e77e3bb6b0d7cdd758f93621defd57119d3e9fa963f7f74c78b56ff53544704bbdb98616c7f859259f34a7dc8affaaf156fe5002dc0ddd4865b5a2c93865f96f786e690192a0b5467cb6cfe7bd14653b16a58bca56bf90e9b27a49336c4a", 0xaa, 0x5}], 0x188402, &(0x7f0000000780)={[{@nr_blocks={'nr_blocks', 0x3d, [0x37]}}], [{@dont_hash}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '#!\\!}'}}]}) rename(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00') 12:15:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x2, 0x0, 0x4, 0x2}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./mnt\x00') r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x2, 0x0, {0x0, r2}}, 0xffffffff) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001540)) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0xb, 0x0}, 0xe00}], 0x40001a9, 0x0) [ 3409.602580] loop2: detected capacity change from 0 to 512 [ 3409.626478] EXT4-fs (loop2): unable to read superblock [ 3409.627329] blktrace: Concurrent blktraces are not allowed on loop14 [ 3409.640899] loop1: detected capacity change from 0 to 36864 [ 3409.667806] blktrace: Concurrent blktraces are not allowed on loop14 [ 3409.689904] loop1: detected capacity change from 0 to 135266304 12:15:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000040)=ANY=[]) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/74, 0x4a, 0x0) [ 3409.711629] loop1: detected capacity change from 0 to 36864 [ 3409.781119] loop2: detected capacity change from 0 to 512 [ 3409.795260] EXT4-fs (loop2): unable to read superblock [ 3411.650077] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3411.651389] CPU: 1 PID: 14456 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 3411.652315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3411.653455] Call Trace: [ 3411.653822] dump_stack+0x107/0x167 [ 3411.654328] dump_header+0x107/0x689 [ 3411.654851] oom_kill_process.cold+0x10/0x15 [ 3411.655466] out_of_memory+0x1149/0x1440 [ 3411.656040] ? oom_killer_disable+0x280/0x280 [ 3411.656665] ? mutex_trylock+0x237/0x2b0 [ 3411.657248] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 3411.658078] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 3411.658913] ? lock_acquire+0x177/0x470 [ 3411.659489] ? warn_alloc+0x190/0x190 [ 3411.660066] __alloc_pages_nodemask+0x51d/0x600 [ 3411.660723] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3411.661566] ? find_get_entry+0x2c8/0x740 [ 3411.662163] alloc_pages_current+0x187/0x280 [ 3411.662785] __page_cache_alloc+0x2d2/0x360 [ 3411.663402] pagecache_get_page+0x2c7/0xc80 [ 3411.664030] filemap_fault+0x177d/0x2210 [ 3411.664620] ? read_cache_page_gfp+0x30/0x30 [ 3411.665254] ? replace_page_cache_page+0x1200/0x1200 [ 3411.665949] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3411.666698] ext4_filemap_fault+0x87/0xc0 [ 3411.667303] __do_fault+0x113/0x410 [ 3411.667820] handle_mm_fault+0x1e53/0x3500 [ 3411.668427] ? __pmd_alloc+0x630/0x630 [ 3411.668987] ? vmacache_find+0x55/0x2a0 [ 3411.669558] do_user_addr_fault+0x56e/0xc60 [ 3411.670170] exc_page_fault+0xa2/0x1a0 [ 3411.670723] ? asm_exc_page_fault+0x8/0x30 [ 3411.671336] asm_exc_page_fault+0x1e/0x30 [ 3411.671920] RIP: 0033:0x7f1ea3f84688 [ 3411.672459] Code: Unable to access opcode bytes at RIP 0x7f1ea3f8465e. [ 3411.673387] RSP: 002b:00007fff51ea65b0 EFLAGS: 00010206 [ 3411.674148] RAX: 0000001b33320000 RBX: 000000000000009a RCX: 0000000000340c38 [ 3411.675157] RDX: 0000000000340c4d RSI: 00007fff51ea6670 RDI: 0000000000000001 [ 3411.676180] RBP: 00007fff51ea660c R08: 0000000000000d53 R09: 00007fff51f38080 [ 3411.677132] R10: 00007fff51f38090 R11: 0000000000625b8c R12: 0000000000000032 [ 3411.678125] R13: 00000000003408d0 R14: 000000000000000c R15: 00007fff51ea6670 [ 3411.679201] Mem-Info: [ 3411.679567] active_anon:4791 inactive_anon:65441 isolated_anon:0 [ 3411.679567] active_file:26 inactive_file:13 isolated_file:0 [ 3411.679567] unevictable:0 dirty:0 writeback:0 [ 3411.679567] slab_reclaimable:6876 slab_unreclaimable:60748 [ 3411.679567] mapped:69634 shmem:120 pagetables:1006 bounce:0 [ 3411.679567] free:2788 free_pcp:62 free_cma:0 [ 3411.687000] Node 0 active_anon:19164kB inactive_anon:261764kB active_file:104kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:480kB writeback_tmp:0kB kernel_stack:4000kB all_unreclaimable? yes [ 3411.692244] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3411.698165] lowmem_reserve[]: 0 1616 1616 1616 [ 3411.699276] Node 0 DMA32 free:4644kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:19164kB inactive_anon:261764kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:4024kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 3411.705705] lowmem_reserve[]: 0 0 0 0 [ 3411.706642] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3411.711101] Node 0 DMA32: 577*4kB (UME) 176*8kB (UME) 42*16kB (M) 8*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4644kB [ 3411.714396] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3411.716312] 157 total pagecache pages [ 3411.717203] 0 pages in swap cache [ 3411.717996] Swap cache stats: add 0, delete 0, find 0/0 [ 3411.719229] Free swap = 0kB [ 3411.719913] Total swap = 0kB [ 3411.720653] 524158 pages RAM [ 3411.721373] 0 pages HighMem/MovableOnly [ 3411.722305] 105068 pages reserved [ 3411.723100] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz3,mems_allowed=0,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=14456,uid=0 [ 3411.726436] Out of memory (oom_kill_allocating_task): Killed process 14456 (syz-executor.3) total-vm:93280kB, anon-rss:380kB, file-rss:34576kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 3411.732699] syz-executor.4 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3411.735071] CPU: 1 PID: 283 Comm: syz-executor.4 Not tainted 5.10.239 #1 [ 3411.736625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3411.738547] Call Trace: [ 3411.739159] dump_stack+0x107/0x167 [ 3411.740025] dump_header+0x107/0x689 [ 3411.740898] oom_kill_process.cold+0x10/0x15 [ 3411.741925] out_of_memory+0x1149/0x1440 [ 3411.742885] ? oom_killer_disable+0x280/0x280 [ 3411.743929] ? mutex_trylock+0x237/0x2b0 [ 3411.744891] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 3411.746271] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 3411.747654] ? lock_acquire+0x177/0x470 [ 3411.748592] ? warn_alloc+0x190/0x190 [ 3411.749510] __alloc_pages_nodemask+0x51d/0x600 [ 3411.750597] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3411.752018] ? find_get_entry+0x2c8/0x740 [ 3411.752996] alloc_pages_current+0x187/0x280 [ 3411.754030] __page_cache_alloc+0x2d2/0x360 [ 3411.755044] pagecache_get_page+0x2c7/0xc80 [ 3411.756068] filemap_fault+0x177d/0x2210 [ 3411.757031] ? read_cache_page_gfp+0x30/0x30 [ 3411.758065] ? replace_page_cache_page+0x1200/0x1200 [ 3411.759251] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3411.760501] ext4_filemap_fault+0x87/0xc0 [ 3411.761472] __do_fault+0x113/0x410 [ 3411.762339] handle_mm_fault+0x1e53/0x3500 [ 3411.763351] ? __pmd_alloc+0x630/0x630 [ 3411.764287] ? vmacache_find+0x55/0x2a0 [ 3411.765233] do_user_addr_fault+0x56e/0xc60 [ 3411.766259] exc_page_fault+0xa2/0x1a0 [ 3411.767181] ? asm_exc_page_fault+0x8/0x30 [ 3411.768192] asm_exc_page_fault+0x1e/0x30 [ 3411.769160] RIP: 0033:0x7f9d3a34d688 [ 3411.770037] Code: Unable to access opcode bytes at RIP 0x7f9d3a34d65e. [ 3411.771585] RSP: 002b:00007fff2abc15c0 EFLAGS: 00010202 [ 3411.772851] RAX: 0000001b2cf20000 RBX: 0000000000000395 RCX: 0000000000340c38 [ 3411.774553] RDX: 0000000000340c4f RSI: 00007fff2abc1680 RDI: 0000000000000001 [ 3411.776260] RBP: 00007fff2abc161c R08: 0000000000000d53 R09: 00007fff2abf2080 [ 3411.777969] R10: 00007fff2abf2090 R11: 0000000000625b90 R12: 0000000000000032 [ 3411.779690] R13: 00000000003408c0 R14: 000000000000000c R15: 00007fff2abc1680 [ 3411.781491] Mem-Info: [ 3411.782099] active_anon:4791 inactive_anon:65441 isolated_anon:0 [ 3411.782099] active_file:23 inactive_file:27 isolated_file:0 [ 3411.782099] unevictable:0 dirty:0 writeback:0 [ 3411.782099] slab_reclaimable:6876 slab_unreclaimable:60748 [ 3411.782099] mapped:69634 shmem:120 pagetables:1006 bounce:0 [ 3411.782099] free:2725 free_pcp:124 free_cma:0 [ 3411.788875] Node 0 active_anon:19164kB inactive_anon:261764kB active_file:92kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:480kB writeback_tmp:0kB kernel_stack:4000kB all_unreclaimable? yes [ 3411.793751] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3411.799237] lowmem_reserve[]: 0 1616 1616 1616 [ 3411.800300] Node 0 DMA32 free:4392kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:19164kB inactive_anon:261764kB active_file:168kB inactive_file:24kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:4024kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB [ 3411.806377] lowmem_reserve[]: 0 0 0 0 [ 3411.807252] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3411.810220] Node 0 DMA32: 514*4kB (UME) 176*8kB (UME) 42*16kB (M) 8*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4392kB [ 3411.813157] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3411.814980] 157 total pagecache pages [ 3411.815818] 0 pages in swap cache [ 3411.816590] Swap cache stats: add 0, delete 0, find 0/0 [ 3411.817740] Free swap = 0kB [ 3411.818405] Total swap = 0kB [ 3411.819048] 524158 pages RAM [ 3411.819716] 0 pages HighMem/MovableOnly [ 3411.820590] 105068 pages reserved [ 3411.821351] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0,global_oom,task_memcg=/syz4,task=syz-executor.4,pid=283,uid=0 [ 3411.824395] Out of memory (oom_kill_allocating_task): Killed process 283 (syz-executor.4) total-vm:93280kB, anon-rss:384kB, file-rss:34604kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 3412.022331] syz-executor.6 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3412.024079] CPU: 0 PID: 14458 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 3412.025209] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3412.026582] Call Trace: [ 3412.027026] dump_stack+0x107/0x167 [ 3412.027623] dump_header+0x107/0x689 [ 3412.028240] oom_kill_process.cold+0x10/0x15 [ 3412.028966] out_of_memory+0x1149/0x1440 [ 3412.029646] ? oom_killer_disable+0x280/0x280 [ 3412.030397] ? mutex_trylock+0x237/0x2b0 [ 3412.031059] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 3412.032044] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 3412.033002] ? lock_acquire+0x177/0x470 [ 3412.033654] ? warn_alloc+0x190/0x190 [ 3412.034294] __alloc_pages_nodemask+0x51d/0x600 [ 3412.035059] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3412.036043] ? find_get_entry+0x2c8/0x740 [ 3412.036740] alloc_pages_current+0x187/0x280 [ 3412.037447] __page_cache_alloc+0x2d2/0x360 [ 3412.038142] pagecache_get_page+0x2c7/0xc80 [ 3412.038835] filemap_fault+0x177d/0x2210 [ 3412.039507] ? read_cache_page_gfp+0x30/0x30 [ 3412.040233] ? replace_page_cache_page+0x1200/0x1200 [ 3412.041059] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3412.041896] ext4_filemap_fault+0x87/0xc0 [ 3412.042563] __do_fault+0x113/0x410 [ 3412.043139] handle_mm_fault+0x1e53/0x3500 [ 3412.043846] ? __pmd_alloc+0x630/0x630 [ 3412.044487] ? vmacache_find+0x55/0x2a0 [ 3412.045115] do_user_addr_fault+0x56e/0xc60 [ 3412.045843] exc_page_fault+0xa2/0x1a0 [ 3412.046451] ? asm_exc_page_fault+0x8/0x30 [ 3412.047123] asm_exc_page_fault+0x1e/0x30 [ 3412.047769] RIP: 0033:0x7f8a57df2688 [ 3412.048378] Code: Unable to access opcode bytes at RIP 0x7f8a57df265e. [ 3412.049429] RSP: 002b:00007ffc4a04e300 EFLAGS: 00010212 [ 3412.050265] RAX: 0000001b33520000 RBX: 0000000000000088 RCX: 0000000000340c38 [ 3412.051589] RDX: 0000000000340c54 RSI: 00007ffc4a04e3c0 RDI: 0000000000000001 [ 3412.052903] RBP: 00007ffc4a04e35c R08: 0000000000000d53 R09: 00007ffc4a068080 [ 3412.054215] R10: 00007ffc4a068090 R11: 0000000000625b9a R12: 0000000000000032 [ 3412.055519] R13: 00000000003408cc R14: 0000000000000014 R15: 00007ffc4a04e3c0 [ 3412.056968] Mem-Info: [ 3412.057487] active_anon:4791 inactive_anon:65421 isolated_anon:0 [ 3412.057487] active_file:4 inactive_file:31 isolated_file:2 [ 3412.057487] unevictable:0 dirty:0 writeback:0 [ 3412.057487] slab_reclaimable:6876 slab_unreclaimable:60748 [ 3412.057487] mapped:69634 shmem:120 pagetables:952 bounce:0 [ 3412.057487] free:2801 free_pcp:62 free_cma:0 [ 3412.062470] Node 0 active_anon:19164kB inactive_anon:261684kB active_file:16kB inactive_file:124kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:278536kB dirty:0kB writeback:0kB shmem:480kB writeback_tmp:0kB kernel_stack:4000kB all_unreclaimable? yes [ 3412.066034] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3412.070072] lowmem_reserve[]: 0 1616 1616 1616 [ 3412.070846] Node 0 DMA32 free:4696kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:19164kB inactive_anon:261684kB active_file:16kB inactive_file:124kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:3808kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 3412.075186] lowmem_reserve[]: 0 0 0 0 [ 3412.075821] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3412.077964] Node 0 DMA32: 548*4kB (UME) 165*8kB (ME) 48*16kB (UM) 11*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4696kB [ 3412.080150] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3412.081505] 157 total pagecache pages [ 3412.082066] 0 pages in swap cache [ 3412.082618] Swap cache stats: add 0, delete 0, find 0/0 [ 3412.083436] Free swap = 0kB [ 3412.083879] Total swap = 0kB [ 3412.084375] 524158 pages RAM [ 3412.084846] 0 pages HighMem/MovableOnly [ 3412.085472] 105068 pages reserved [ 3412.085983] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz6,mems_allowed=0,global_oom,task_memcg=/syz6,task=syz-executor.6,pid=14458,uid=0 [ 3412.088200] Out of memory (oom_kill_allocating_task): Killed process 14458 (syz-executor.6) total-vm:93280kB, anon-rss:380kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 3412.418782] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3412.420013] CPU: 0 PID: 253 Comm: syz-fuzzer Not tainted 5.10.239 #1 [ 3412.420775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3412.421750] Call Trace: [ 3412.422075] dump_stack+0x107/0x167 [ 3412.422509] dump_header+0x107/0x689 [ 3412.422952] oom_kill_process.cold+0x10/0x15 [ 3412.423476] out_of_memory+0x1149/0x1440 [ 3412.423963] ? oom_killer_disable+0x280/0x280 [ 3412.424505] ? mutex_trylock+0x237/0x2b0 [ 3412.424985] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 3412.425686] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 3412.426386] ? lock_acquire+0x177/0x470 [ 3412.426859] ? warn_alloc+0x190/0x190 [ 3412.427322] __alloc_pages_nodemask+0x51d/0x600 [ 3412.427873] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3412.428591] ? find_get_entry+0x2c8/0x740 [ 3412.429086] alloc_pages_current+0x187/0x280 [ 3412.429613] __page_cache_alloc+0x2d2/0x360 [ 3412.430126] pagecache_get_page+0x2c7/0xc80 [ 3412.430640] filemap_fault+0x177d/0x2210 [ 3412.431126] ? read_cache_page_gfp+0x30/0x30 [ 3412.431658] ? replace_page_cache_page+0x1200/0x1200 [ 3412.432269] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3412.432897] ext4_filemap_fault+0x87/0xc0 [ 3412.433388] __do_fault+0x113/0x410 [ 3412.433823] handle_mm_fault+0x1e53/0x3500 [ 3412.434328] ? _copy_from_user+0xfb/0x1b0 [ 3412.434820] ? __pmd_alloc+0x630/0x630 [ 3412.435286] ? vmacache_find+0x55/0x2a0 [ 3412.435763] do_user_addr_fault+0x56e/0xc60 [ 3412.436288] exc_page_fault+0xa2/0x1a0 [ 3412.436748] ? asm_exc_page_fault+0x8/0x30 [ 3412.437248] asm_exc_page_fault+0x1e/0x30 [ 3412.437735] RIP: 0033:0x466533 [ 3412.438119] Code: Unable to access opcode bytes at RIP 0x466509. [ 3412.438833] RSP: 002b:000000c00003fe80 EFLAGS: 00010202 [ 3412.439462] RAX: ffffffffffffff92 RBX: 000000003b970ed5 RCX: 0000000000466533 [ 3412.440311] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001f20e78 [ 3412.441153] RBP: 000000c00003fec8 R08: 0000000000000000 R09: 0000000000000000 [ 3412.441991] R10: 000000c00003feb8 R11: 0000000000000202 R12: 0000000000438880 [ 3412.442829] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000 [ 3412.444627] Mem-Info: [ 3412.444937] active_anon:4791 inactive_anon:65411 isolated_anon:0 [ 3412.444937] active_file:33 inactive_file:7 isolated_file:0 [ 3412.444937] unevictable:0 dirty:0 writeback:0 [ 3412.444937] slab_reclaimable:6876 slab_unreclaimable:60748 [ 3412.444937] mapped:69634 shmem:120 pagetables:925 bounce:0 [ 3412.444937] free:2864 free_pcp:0 free_cma:0 [ 3412.448817] Node 0 active_anon:19164kB inactive_anon:261644kB active_file:132kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:480kB writeback_tmp:0kB kernel_stack:4000kB all_unreclaimable? yes [ 3412.451673] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3412.454727] lowmem_reserve[]: 0 1616 1616 1616 [ 3412.455301] Node 0 DMA32 free:4948kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:19164kB inactive_anon:261644kB active_file:124kB inactive_file:16kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:3700kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3412.458599] lowmem_reserve[]: 0 0 0 0 [ 3412.459064] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3412.460711] Node 0 DMA32: 562*4kB (UME) 195*8kB (UME) 53*16kB (UM) 12*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5104kB [ 3412.462382] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3412.463376] 158 total pagecache pages [ 3412.463817] 0 pages in swap cache [ 3412.464242] Swap cache stats: add 0, delete 0, find 0/0 [ 3412.464867] Free swap = 0kB [ 3412.465259] Total swap = 0kB [ 3412.465612] 524158 pages RAM [ 3412.465984] 0 pages HighMem/MovableOnly [ 3412.466463] 105068 pages reserved [ 3412.466868] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=253,uid=0 [ 3412.468718] Out of memory (oom_kill_allocating_task): Killed process 252 (syz-fuzzer) total-vm:1238100kB, anon-rss:245672kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:928kB oom_score_adj:0 [ 3414.584043] systemd invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3414.585996] CPU: 0 PID: 1 Comm: systemd Not tainted 5.10.239 #1 [ 3414.587175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3414.588822] Call Trace: [ 3414.589345] dump_stack+0x107/0x167 [ 3414.590076] dump_header+0x107/0x689 [ 3414.590815] oom_kill_process.cold+0x10/0x15 [ 3414.591702] out_of_memory+0x358/0x1440 [ 3414.592516] ? oom_killer_disable+0x280/0x280 [ 3414.593408] ? mutex_trylock+0x237/0x2b0 [ 3414.594211] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 3414.595390] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 3414.596582] ? lock_acquire+0x177/0x470 [ 3414.597375] ? warn_alloc+0x190/0x190 [ 3414.598150] __alloc_pages_nodemask+0x51d/0x600 [ 3414.599083] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3414.600292] ? find_get_entry+0x2c8/0x740 [ 3414.601127] alloc_pages_current+0x187/0x280 [ 3414.602000] __page_cache_alloc+0x2d2/0x360 [ 3414.602860] pagecache_get_page+0x2c7/0xc80 [ 3414.603706] filemap_fault+0x177d/0x2210 [ 3414.604535] ? read_cache_page_gfp+0x30/0x30 [ 3414.605409] ? handle_mm_fault+0x28b1/0x3500 [ 3414.606279] ? lock_downgrade+0x6d0/0x6d0 [ 3414.607102] ext4_filemap_fault+0x87/0xc0 [ 3414.607917] __do_fault+0x113/0x410 [ 3414.608647] handle_mm_fault+0x1e53/0x3500 [ 3414.609476] ? find_held_lock+0x2c/0x110 [ 3414.610265] ? __pmd_alloc+0x630/0x630 [ 3414.611039] ? vmacache_find+0x55/0x2a0 [ 3414.611821] do_user_addr_fault+0x56e/0xc60 [ 3414.612701] exc_page_fault+0xa2/0x1a0 [ 3414.613471] ? asm_exc_page_fault+0x8/0x30 [ 3414.614297] asm_exc_page_fault+0x1e/0x30 [ 3414.615111] RIP: 0033:0x7f186b58cb3d [ 3414.615843] Code: Unable to access opcode bytes at RIP 0x7f186b58cb13. [ 3414.617136] RSP: 002b:00007ffcf6786df0 EFLAGS: 00010206 [ 3414.618186] RAX: 0000000000000000 RBX: 00007ffcf6786e10 RCX: 000000000000002f [ 3414.619593] RDX: 0000000000000001 RSI: 00007f186b66ea0d RDI: 000056425917ea08 [ 3414.621001] RBP: 000056425917e9ff R08: 000056425caaf200 R09: 006e696d2e79726f [ 3414.622394] R10: 00007ffcf6786cc7 R11: 0000000000000000 R12: 000056425caaf2b2 [ 3414.623780] R13: 000056425caaf280 R14: ffffffffffffffff R15: 000056425ca93b10 [ 3414.625364] Mem-Info: [ 3414.625875] active_anon:42 inactive_anon:7539 isolated_anon:0 [ 3414.625875] active_file:11 inactive_file:42 isolated_file:0 [ 3414.625875] unevictable:0 dirty:0 writeback:0 [ 3414.625875] slab_reclaimable:6876 slab_unreclaimable:58321 [ 3414.625875] mapped:26116 shmem:89 pagetables:357 bounce:0 [ 3414.625875] free:2879 free_pcp:0 free_cma:0 [ 3414.631909] Node 0 active_anon:168kB inactive_anon:30156kB active_file:44kB inactive_file:168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104464kB dirty:0kB writeback:0kB shmem:356kB writeback_tmp:0kB kernel_stack:3296kB all_unreclaimable? no [ 3414.636368] Node 0 DMA free:6508kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3414.641431] lowmem_reserve[]: 0 1616 1616 1616 [ 3414.642387] Node 0 DMA32 free:5008kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:168kB inactive_anon:30156kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:1428kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3414.647832] lowmem_reserve[]: 0 0 0 0 [ 3414.648641] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6508kB [ 3414.651310] Node 0 DMA32: 427*4kB (ME) 204*8kB (UME) 64*16kB (UM) 30*32kB (UM) 0*64kB 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5452kB [ 3414.654061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3414.655698] 145 total pagecache pages [ 3414.656469] 0 pages in swap cache [ 3414.657159] Swap cache stats: add 0, delete 0, find 0/0 [ 3414.658206] Free swap = 0kB [ 3414.658781] Total swap = 0kB [ 3414.659387] 524158 pages RAM [ 3414.659968] 0 pages HighMem/MovableOnly [ 3414.660765] 105068 pages reserved [ 3414.661541] Unreclaimable slab info: [ 3414.662689] Name Used Total [ 3414.663809] pid_2 52KB 52KB [ 3414.664877] IEEE-802.15.4-RAW 63KB 63KB [ 3414.665932] p9_req_t 8KB 8KB [ 3414.666984] fib6_nodes 28KB 28KB [ 3414.668033] ip6_dst_cache 48KB 48KB [ 3414.669082] PINGv6 63KB 63KB [ 3414.670144] RAWv6 220KB 220KB [ 3414.671180] UDPLITEv6 62KB 62KB [ 3414.672227] UDPv6 62KB 62KB [ 3414.673283] TCPv6 62KB 62KB [ 3414.674331] scsi_sense_cache 8KB 8KB [ 3414.675368] sd_ext_cdb 3KB 3KB [ 3414.676412] virtio_scsi_cmd 16KB 16KB [ 3414.677761] sgpool-128 59KB 59KB [ 3414.678861] sgpool-64 63KB 63KB [ 3414.679900] sgpool-32 409KB 409KB [ 3414.680955] sgpool-16 120KB 120KB [ 3414.681996] sgpool-8 78KB 78KB [ 3414.683028] io_kiocb 30KB 30KB [ 3414.684086] mqueue_inode_cache 62KB 62KB [ 3414.685149] nfs_commit_data 15KB 15KB [ 3414.686187] nfs_write_data 47KB 47KB [ 3414.687222] jbd2_inode 7KB 7KB [ 3414.688281] ext4_system_zone 3KB 3KB [ 3414.689305] ext4_io_end_vec 7KB 7KB [ 3414.690344] ext4_bio_post_read_ctx 15KB 15KB [ 3414.691452] bio-2 4KB 4KB [ 3414.692484] fasync_cache 7KB 7KB [ 3414.693509] pid_namespace 7KB 7KB [ 3414.694558] posix_timers_cache 15KB 15KB [ 3414.695607] rpc_buffers 31KB 31KB [ 3414.696643] rpc_tasks 3KB 3KB [ 3414.697668] UNIX 416KB 416KB [ 3414.698701] tcp_bind_bucket 8KB 8KB [ 3414.699731] ip_fib_trie 8KB 8KB [ 3414.700766] ip_fib_alias 19KB 19KB [ 3414.701798] ip_dst_cache 54KB 88KB [ 3414.702824] PING 62KB 62KB [ 3414.703871] RAW 93KB 93KB [ 3414.704908] UDP 252KB 252KB [ 3414.705934] tw_sock_TCP 7KB 7KB [ 3414.706971] request_sock_TCP 7KB 7KB [ 3414.707994] TCP 60KB 60KB [ 3414.709028] hugetlbfs_inode_cache 15KB 15KB [ 3414.710144] bio-1 11KB 11KB [ 3414.711170] eventpoll_pwq 19KB 19KB [ 3414.712196] eventpoll_epi 86KB 86KB [ 3414.713203] inotify_inode_mark 44KB 54KB [ 3414.714206] request_queue 90KB 90KB [ 3414.715216] blkdev_ioc 18KB 18KB [ 3414.716240] bio-0 292KB 292KB [ 3414.717233] biovec-max 892KB 892KB [ 3414.718255] biovec-64 551KB 551KB [ 3414.719275] biovec-16 52KB 52KB [ 3414.720313] uid_cache 8KB 8KB [ 3414.721337] dmaengine-unmap-2 4KB 4KB [ 3414.722354] audit_buffer 7KB 7KB [ 3414.723377] skbuff_fclone_cache 105KB 105KB [ 3414.724447] skbuff_head_cache 680KB 780KB [ 3414.725475] file_lock_cache 74KB 74KB [ 3414.726490] file_lock_ctx 7KB 7KB [ 3414.727507] fsnotify_mark_connector 52KB 52KB [ 3414.728627] net_namespace 115KB 115KB [ 3414.729651] task_delay_info 108KB 108KB [ 3414.730675] taskstats 84KB 84KB [ 3414.731679] proc_dir_entry 329KB 363KB [ 3414.732693] pde_opener 47KB 47KB [ 3414.733698] seq_file 71KB 71KB [ 3414.734706] sigqueue 66KB 66KB [ 3414.735701] shmem_inode_cache 1287KB 1289KB [ 3414.736719] kernfs_iattrs_cache 239KB 239KB [ 3414.737755] kernfs_node_cache 5295KB 5295KB [ 3414.738751] mnt_cache 204KB 204KB [ 3414.739775] filp 1347KB 1942KB [ 3414.740801] names_cache 10671KB 11717KB [ 3414.741803] hashtab_node 274KB 274KB [ 3414.742799] ebitmap_node 1149KB 1149KB [ 3414.743817] avtab_node 4976KB 4976KB [ 3414.744837] avc_node 31KB 31KB [ 3414.745862] lsm_inode_cache 2668KB 2956KB [ 3414.746868] lsm_file_cache 106KB 160KB [ 3414.747867] key_jar 31KB 31KB [ 3414.748880] uts_namespace 15KB 15KB [ 3414.749880] nsproxy 7KB 7KB [ 3414.750900] vm_area_struct 747KB 964KB [ 3414.751908] fs_cache 88KB 88KB [ 3414.752918] files_cache 350KB 350KB [ 3414.753909] signal_cache 251KB 401KB [ 3414.754901] sighand_cache 309KB 330KB [ 3414.755902] task_struct 1017KB 1312KB [ 3414.756915] cred_jar 125KB 164KB [ 3414.757917] anon_vma_chain 154KB 232KB [ 3414.758908] anon_vma 186KB 215KB [ 3414.759912] pid 53KB 75KB [ 3414.760918] Acpi-Operand 207KB 237KB [ 3414.761912] Acpi-ParseExt 27KB 27KB [ 3414.762914] Acpi-Parse 146KB 162KB [ 3414.763904] Acpi-State 86KB 102KB [ 3414.764912] Acpi-Namespace 24KB 24KB [ 3414.765916] numa_policy 7KB 7KB [ 3414.766913] trace_event_file 176KB 176KB [ 3414.767910] ftrace_event_field 280KB 280KB [ 3414.768934] pool_workqueue 40KB 40KB [ 3414.769931] task_group 16KB 16KB [ 3414.770938] mm_struct 192KB 283KB [ 3414.771935] vmap_area 133KB 133KB [ 3414.772930] page->ptl 184KB 200KB [ 3414.773922] kmemleak_scan_area 159KB 159KB [ 3414.775804] kmemleak_object 129927KB 145959KB [ 3414.776817] kmalloc-8k 4576KB 4672KB [ 3414.777812] kmalloc-4k 8120KB 8392KB [ 3414.778804] kmalloc-2k 4064KB 4256KB [ 3414.779799] kmalloc-1k 2692KB 3456KB [ 3414.780824] kmalloc-512 3434KB 4432KB [ 3414.781815] kmalloc-256 1260KB 1336KB [ 3414.782833] kmalloc-192 400KB 660KB [ 3414.783830] kmalloc-128 432KB 548KB [ 3414.784848] kmalloc-96 459KB 736KB [ 3414.785872] kmalloc-64 933KB 1352KB [ 3414.786887] kmalloc-32 783KB 848KB [ 3414.787881] kmalloc-16 352KB 356KB [ 3414.788877] kmalloc-8 295KB 322KB [ 3414.789866] kmem_cache_node 47KB 47KB [ 3414.790851] kmem_cache 75KB 75KB [ 3414.791828] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/syz3,task=syz-executor.3,pid=16462,uid=0 [ 3414.794350] Out of memory: Killed process 16470 (syz-executor.3) total-vm:93940kB, anon-rss:456kB, file-rss:34820kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 3415.086725] systemd-journal invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=-250 [ 3415.088427] CPU: 0 PID: 102 Comm: systemd-journal Not tainted 5.10.239 #1 [ 3415.089471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3415.090776] Call Trace: [ 3415.091169] dump_stack+0x107/0x167 [ 3415.091706] dump_header+0x107/0x689 [ 3415.092273] oom_kill_process.cold+0x10/0x15 [ 3415.092919] out_of_memory+0x1149/0x1440 [ 3415.093522] ? oom_killer_disable+0x280/0x280 [ 3415.094189] ? mutex_trylock+0x237/0x2b0 [ 3415.094784] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 3415.095657] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 3415.096528] ? lock_acquire+0x177/0x470 [ 3415.097115] ? warn_alloc+0x190/0x190 [ 3415.097691] __alloc_pages_nodemask+0x51d/0x600 [ 3415.098376] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3415.099253] ? find_get_entry+0x2c8/0x740 [ 3415.099861] alloc_pages_current+0x187/0x280 [ 3415.100511] __page_cache_alloc+0x2d2/0x360 [ 3415.101140] pagecache_get_page+0x2c7/0xc80 [ 3415.101772] filemap_fault+0x177d/0x2210 [ 3415.102370] ? read_cache_page_gfp+0x30/0x30 [ 3415.103010] ? replace_page_cache_page+0x1200/0x1200 [ 3415.103745] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3415.104523] ext4_filemap_fault+0x87/0xc0 [ 3415.105125] __do_fault+0x113/0x410 [ 3415.105658] handle_mm_fault+0x1e53/0x3500 [ 3415.106273] ? trace_hardirqs_on+0x5b/0x180 [ 3415.106897] ? find_held_lock+0x2c/0x110 [ 3415.107491] ? __pmd_alloc+0x630/0x630 [ 3415.108070] ? vmacache_find+0x55/0x2a0 [ 3415.108651] ? vmacache_update+0xce/0x140 [ 3415.109258] do_user_addr_fault+0x56e/0xc60 [ 3415.109890] exc_page_fault+0xa2/0x1a0 [ 3415.110456] ? asm_exc_page_fault+0x8/0x30 [ 3415.111075] asm_exc_page_fault+0x1e/0x30 [ 3415.111672] RIP: 0033:0x7fbe95c5e6d2 [ 3415.112224] Code: Unable to access opcode bytes at RIP 0x7fbe95c5e6a8. [ 3415.113173] RSP: 002b:00007ffe95825e30 EFLAGS: 00010297 [ 3415.113946] RAX: 0000000000000006 RBX: 00000000000aeea0 RCX: 00007fbe95ccd320 [ 3415.114982] RDX: 00007fbe95cccd4c RSI: 00007ffe95825e38 RDI: 000055e60fe953f0 [ 3415.116005] RBP: 00007ffe95825eb8 R08: 0000000000000038 R09: 00000000000aeea0 [ 3415.117037] R10: 0000000000000002 R11: 0000000000626d42 R12: 00007fbe94571ea0 [ 3415.118061] R13: 000055e60fe942d0 R14: 0000000000000006 R15: 00007ffe95825e40 [ 3415.119166] Mem-Info: [ 3415.119540] active_anon:42 inactive_anon:7540 isolated_anon:0 [ 3415.119540] active_file:36 inactive_file:23 isolated_file:0 [ 3415.119540] unevictable:0 dirty:0 writeback:0 [ 3415.119540] slab_reclaimable:6876 slab_unreclaimable:58331 [ 3415.119540] mapped:26114 shmem:89 pagetables:357 bounce:0 [ 3415.119540] free:2732 free_pcp:62 free_cma:0 [ 3415.124008] Node 0 active_anon:168kB inactive_anon:30160kB active_file:144kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104456kB dirty:0kB writeback:0kB shmem:356kB writeback_tmp:0kB kernel_stack:3296kB all_unreclaimable? no [ 3415.127294] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3415.131034] lowmem_reserve[]: 0 1616 1616 1616 [ 3415.131731] Node 0 DMA32 free:3432kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:168kB inactive_anon:30160kB active_file:144kB inactive_file:92kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:1428kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 3415.135754] lowmem_reserve[]: 0 0 0 0 [ 3415.136357] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 3415.138281] Node 0 DMA32: 310*4kB (UME) 140*8kB (UME) 47*16kB (UM) 10*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3432kB [ 3415.140273] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3415.141491] 148 total pagecache pages [ 3415.142028] 0 pages in swap cache [ 3415.142544] Swap cache stats: add 0, delete 0, find 0/0 [ 3415.143319] Free swap = 0kB [ 3415.143746] Total swap = 0kB [ 3415.144201] 524158 pages RAM [ 3415.144628] 0 pages HighMem/MovableOnly [ 3415.145207] 105068 pages reserved [ 3415.145696] Unreclaimable slab info: [ 3415.146247] Name Used Total [ 3415.147024] pid_2 52KB 52KB [ 3415.147796] IEEE-802.15.4-RAW 63KB 63KB [ 3415.148574] p9_req_t 8KB 8KB [ 3415.149348] fib6_nodes 28KB 28KB [ 3415.150095] ip6_dst_cache 48KB 48KB [ 3415.150867] PINGv6 63KB 63KB [ 3415.151643] RAWv6 220KB 220KB [ 3415.152420] UDPLITEv6 62KB 62KB [ 3415.153191] UDPv6 62KB 62KB [ 3415.153941] TCPv6 62KB 62KB [ 3415.154713] scsi_sense_cache 8KB 8KB [ 3415.155482] sd_ext_cdb 3KB 3KB [ 3415.156277] virtio_scsi_cmd 16KB 16KB [ 3415.157030] sgpool-128 59KB 59KB [ 3415.157804] sgpool-64 63KB 63KB [ 3415.158574] sgpool-32 409KB 409KB [ 3415.159344] sgpool-16 120KB 120KB [ 3415.160116] sgpool-8 78KB 78KB [ 3415.160899] io_kiocb 30KB 30KB [ 3415.161704] mqueue_inode_cache 62KB 62KB [ 3415.162488] nfs_commit_data 15KB 15KB [ 3415.163254] nfs_write_data 47KB 47KB [ 3415.163998] jbd2_inode 7KB 7KB [ 3415.164776] ext4_system_zone 3KB 3KB [ 3415.165544] ext4_io_end_vec 7KB 7KB [ 3415.166317] ext4_bio_post_read_ctx 15KB 15KB [ 3415.167142] bio-2 4KB 4KB [ 3415.167884] fasync_cache 7KB 7KB [ 3415.168662] pid_namespace 7KB 7KB [ 3415.169424] posix_timers_cache 15KB 15KB [ 3415.170198] rpc_buffers 31KB 31KB [ 3415.170943] rpc_tasks 3KB 3KB [ 3415.171705] UNIX 416KB 416KB [ 3415.172477] tcp_bind_bucket 8KB 8KB [ 3415.173245] ip_fib_trie 8KB 8KB [ 3415.173992] ip_fib_alias 19KB 19KB [ 3415.174756] ip_dst_cache 54KB 88KB [ 3415.175521] PING 62KB 62KB [ 3415.176295] RAW 93KB 93KB [ 3415.177035] UDP 252KB 252KB [ 3415.177804] tw_sock_TCP 7KB 7KB [ 3415.178562] request_sock_TCP 7KB 7KB [ 3415.179319] TCP 60KB 60KB [ 3415.180059] hugetlbfs_inode_cache 15KB 15KB [ 3415.180864] bio-1 11KB 11KB [ 3415.181621] eventpoll_pwq 19KB 19KB [ 3415.182382] eventpoll_epi 86KB 86KB [ 3415.183173] inotify_inode_mark 44KB 54KB [ 3415.183973] request_queue 90KB 90KB [ 3415.184772] blkdev_ioc 18KB 18KB [ 3415.185577] bio-0 292KB 292KB [ 3415.186393] biovec-max 892KB 892KB [ 3415.187194] biovec-64 551KB 551KB [ 3415.187965] biovec-16 52KB 52KB [ 3415.189016] uid_cache 8KB 8KB [ 3415.189857] dmaengine-unmap-2 4KB 4KB [ 3415.190667] audit_buffer 7KB 7KB [ 3415.191463] skbuff_fclone_cache 105KB 105KB [ 3415.192300] skbuff_head_cache 700KB 780KB [ 3415.193079] file_lock_cache 74KB 74KB [ 3415.193874] file_lock_ctx 7KB 7KB [ 3415.194673] fsnotify_mark_connector 52KB 52KB [ 3415.195536] net_namespace 115KB 115KB [ 3415.196330] task_delay_info 108KB 108KB [ 3415.197102] taskstats 84KB 84KB [ 3415.197898] proc_dir_entry 329KB 363KB [ 3415.198703] pde_opener 47KB 47KB [ 3415.199501] seq_file 71KB 71KB [ 3415.200297] sigqueue 66KB 66KB [ 3415.201073] shmem_inode_cache 1287KB 1289KB [ 3415.201868] kernfs_iattrs_cache 239KB 239KB [ 3415.202689] kernfs_node_cache 5295KB 5295KB [ 3415.203473] mnt_cache 204KB 204KB [ 3415.204276] filp 1347KB 1942KB [ 3415.205054] names_cache 10671KB 11717KB [ 3415.205842] hashtab_node 274KB 274KB [ 3415.206634] ebitmap_node 1149KB 1149KB [ 3415.207418] avtab_node 4976KB 4976KB [ 3415.208222] avc_node 31KB 31KB [ 3415.208984] lsm_inode_cache 2668KB 2956KB [ 3415.209765] lsm_file_cache 106KB 160KB [ 3415.210540] key_jar 31KB 31KB [ 3415.211313] uts_namespace 15KB 15KB [ 3415.212082] nsproxy 7KB 7KB [ 3415.212872] vm_area_struct 747KB 964KB [ 3415.213662] fs_cache 88KB 88KB [ 3415.214441] files_cache 350KB 350KB [ 3415.215213] signal_cache 251KB 401KB [ 3415.215984] sighand_cache 309KB 330KB [ 3415.216772] task_struct 1017KB 1312KB [ 3415.217564] cred_jar 125KB 164KB [ 3415.218347] anon_vma_chain 154KB 232KB [ 3415.219140] anon_vma 186KB 215KB [ 3415.219916] pid 53KB 75KB [ 3415.220716] Acpi-Operand 207KB 237KB [ 3415.221522] Acpi-ParseExt 27KB 27KB [ 3415.222300] Acpi-Parse 146KB 162KB [ 3415.223054] Acpi-State 86KB 102KB [ 3415.223846] Acpi-Namespace 24KB 24KB [ 3415.224635] numa_policy 7KB 7KB [ 3415.225408] trace_event_file 176KB 176KB [ 3415.226180] ftrace_event_field 280KB 280KB [ 3415.226941] pool_workqueue 40KB 40KB [ 3415.227720] task_group 16KB 16KB [ 3415.228499] mm_struct 192KB 283KB [ 3415.229274] vmap_area 133KB 133KB [ 3415.230026] page->ptl 184KB 200KB [ 3415.230797] kmemleak_scan_area 159KB 159KB [ 3415.231673] kmemleak_object 130020KB 145959KB [ 3415.232467] kmalloc-8k 4576KB 4672KB [ 3415.233244] kmalloc-4k 8120KB 8392KB [ 3415.234006] kmalloc-2k 4064KB 4256KB [ 3415.234786] kmalloc-1k 2692KB 3456KB [ 3415.235563] kmalloc-512 3484KB 4432KB [ 3415.236344] kmalloc-256 1260KB 1336KB [ 3415.237099] kmalloc-192 400KB 660KB [ 3415.237885] kmalloc-128 432KB 548KB [ 3415.238664] kmalloc-96 459KB 736KB [ 3415.239431] kmalloc-64 933KB 1352KB [ 3415.240212] kmalloc-32 783KB 848KB [ 3415.240965] kmalloc-16 352KB 356KB [ 3415.241743] kmalloc-8 295KB 322KB [ 3415.242510] kmem_cache_node 47KB 47KB [ 3415.243284] kmem_cache 75KB 75KB [ 3415.244042] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-journald.service,task=systemd-journal,pid=102,uid=0 [ 3415.246614] Out of memory (oom_kill_allocating_task): Killed process 102 (systemd-journal) total-vm:31836kB, anon-rss:988kB, file-rss:0kB, shmem-rss:4kB, UID:0 pgtables:88kB oom_score_adj:-250 [ 3415.271923] systemd-rfkill invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3415.273276] CPU: 0 PID: 16521 Comm: systemd-rfkill Not tainted 5.10.239 #1 [ 3415.274175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3415.275249] Call Trace: [ 3415.275592] dump_stack+0x107/0x167 [ 3415.276073] dump_header+0x107/0x689 [ 3415.276559] oom_kill_process.cold+0x10/0x15 [ 3415.277130] out_of_memory+0x1149/0x1440 [ 3415.277657] ? oom_killer_disable+0x280/0x280 [ 3415.278233] ? mutex_trylock+0x237/0x2b0 [ 3415.278753] ? __alloc_pages_slowpath.constprop.0+0xa82/0x2200 [ 3415.279519] __alloc_pages_slowpath.constprop.0+0x1c07/0x2200 [ 3415.280282] ? lock_acquire+0x177/0x470 [ 3415.280795] ? warn_alloc+0x190/0x190 [ 3415.281298] __alloc_pages_nodemask+0x51d/0x600 [ 3415.281896] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3415.282667] ? find_get_entry+0x2c8/0x740 [ 3415.283203] alloc_pages_current+0x187/0x280 [ 3415.283769] __page_cache_alloc+0x2d2/0x360 [ 3415.284335] pagecache_get_page+0x2c7/0xc80 [ 3415.284896] filemap_fault+0x177d/0x2210 [ 3415.285424] ? read_cache_page_gfp+0x30/0x30 [ 3415.285991] ? replace_page_cache_page+0x1200/0x1200 [ 3415.286641] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3415.287315] ext4_filemap_fault+0x87/0xc0 [ 3415.287847] __do_fault+0x113/0x410 [ 3415.288323] handle_mm_fault+0x1e53/0x3500 [ 3415.288866] ? find_held_lock+0x2c/0x110 [ 3415.289388] ? __pmd_alloc+0x630/0x630 [ 3415.289891] ? vmacache_find+0x55/0x2a0 [ 3415.290406] do_user_addr_fault+0x56e/0xc60 [ 3415.290966] exc_page_fault+0xa2/0x1a0 [ 3415.291460] ? asm_exc_page_fault+0x8/0x30 [ 3415.291997] asm_exc_page_fault+0x1e/0x30 [ 3415.292524] RIP: 0033:0x7f4be5baed60 [ 3415.292993] Code: Unable to access opcode bytes at RIP 0x7f4be5baed36. [ 3415.293824] RSP: 002b:00007fffb2cfaf28 EFLAGS: 00010202 [ 3415.294499] RAX: 00007f4be58f5610 RBX: 0000000000000004 RCX: 0000000000000032 [ 3415.295405] RDX: 0000000000000003 RSI: 0000000000003508 RDI: 00007f4be58f6000 [ 3415.296314] RBP: 00007fffb2cfb2c0 R08: 00000000ffffffff R09: 0000000000000000 [ 3415.297217] R10: 00007f4be58f6000 R11: 0000000000000003 R12: 00007f4be5b91510 [ 3415.298119] R13: 00007fffb2cfaf30 R14: 00007fffb2cfafc0 R15: 00007fffb2cfb350 [ 3415.299327] Mem-Info: [ 3415.299660] active_anon:42 inactive_anon:7540 isolated_anon:0 [ 3415.299660] active_file:15 inactive_file:39 isolated_file:0 [ 3415.299660] unevictable:0 dirty:0 writeback:0 [ 3415.299660] slab_reclaimable:6876 slab_unreclaimable:58331 [ 3415.299660] mapped:26114 shmem:89 pagetables:357 bounce:0 [ 3415.299660] free:2228 free_pcp:62 free_cma:0 [ 3415.303611] Node 0 active_anon:168kB inactive_anon:30160kB active_file:60kB inactive_file:156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104456kB dirty:0kB writeback:0kB shmem:356kB writeback_tmp:0kB kernel_stack:3296kB all_unreclaimable? yes [ 3415.306508] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3415.309834] lowmem_reserve[]: 0 1616 1616 1616 [ 3415.310454] Node 0 DMA32 free:2424kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:168kB inactive_anon:30160kB active_file:60kB inactive_file:92kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:1428kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 3415.313989] lowmem_reserve[]: 0 0 0 0 [ 3415.314514] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 3415.316223] Node 0 DMA32: 224*4kB (UME) 99*8kB (UME) 34*16kB (UM) 6*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2424kB [ 3415.317963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3415.319040] 148 total pagecache pages [ 3415.319533] 0 pages in swap cache [ 3415.319970] Swap cache stats: add 0, delete 0, find 0/0 [ 3415.320659] Free swap = 0kB [ 3415.321036] Total swap = 0kB [ 3415.321435] 524158 pages RAM [ 3415.321812] 0 pages HighMem/MovableOnly [ 3415.322324] 105068 pages reserved [ 3415.322753] Unreclaimable slab info: [ 3415.323249] Name Used Total [ 3415.323934] pid_2 52KB 52KB [ 3415.324624] IEEE-802.15.4-RAW 63KB 63KB [ 3415.325307] p9_req_t 8KB 8KB [ 3415.325975] fib6_nodes 28KB 28KB [ 3415.326660] ip6_dst_cache 48KB 48KB [ 3415.327347] PINGv6 63KB 63KB [ 3415.328018] RAWv6 220KB 220KB [ 3415.328706] UDPLITEv6 62KB 62KB [ 3415.329393] UDPv6 62KB 62KB [ 3415.330061] TCPv6 62KB 62KB [ 3415.330741] scsi_sense_cache 8KB 8KB [ 3415.331421] sd_ext_cdb 3KB 3KB [ 3415.332089] virtio_scsi_cmd 16KB 16KB [ 3415.332769] sgpool-128 59KB 59KB [ 3415.333444] sgpool-64 63KB 63KB [ 3415.334100] sgpool-32 409KB 409KB [ 3415.334778] sgpool-16 120KB 120KB [ 3415.335464] sgpool-8 78KB 78KB [ 3415.336147] io_kiocb 30KB 30KB [ 3415.336806] mqueue_inode_cache 62KB 62KB [ 3415.337493] nfs_commit_data 15KB 15KB [ 3415.338172] nfs_write_data 47KB 47KB [ 3415.338831] jbd2_inode 7KB 7KB [ 3415.339518] ext4_system_zone 3KB 3KB [ 3415.340207] ext4_io_end_vec 7KB 7KB [ 3415.340865] ext4_bio_post_read_ctx 15KB 15KB [ 3415.341601] bio-2 4KB 4KB [ 3415.342287] fasync_cache 7KB 7KB [ 3415.342947] pid_namespace 7KB 7KB [ 3415.343620] posix_timers_cache 15KB 15KB [ 3415.344317] rpc_buffers 31KB 31KB [ 3415.344970] rpc_tasks 3KB 3KB [ 3415.345642] UNIX 416KB 416KB [ 3415.346315] tcp_bind_bucket 8KB 8KB [ 3415.346969] ip_fib_trie 8KB 8KB [ 3415.347642] ip_fib_alias 19KB 19KB [ 3415.348320] ip_dst_cache 54KB 88KB [ 3415.348972] PING 62KB 62KB [ 3415.349643] RAW 93KB 93KB [ 3415.350314] UDP 252KB 252KB [ 3415.350967] tw_sock_TCP 7KB 7KB [ 3415.351642] request_sock_TCP 7KB 7KB [ 3415.352336] TCP 60KB 60KB [ 3415.352987] hugetlbfs_inode_cache 15KB 15KB [ 3415.353707] bio-1 11KB 11KB [ 3415.354376] eventpoll_pwq 19KB 19KB [ 3415.355028] eventpoll_epi 86KB 86KB [ 3415.355697] inotify_inode_mark 44KB 54KB [ 3415.356453] request_queue 90KB 90KB [ 3415.357098] blkdev_ioc 18KB 18KB [ 3415.357764] bio-0 292KB 292KB [ 3415.358430] biovec-max 892KB 892KB [ 3415.359074] biovec-64 551KB 551KB [ 3415.359737] biovec-16 52KB 52KB [ 3415.360412] uid_cache 8KB 8KB [ 3415.361057] dmaengine-unmap-2 4KB 4KB [ 3415.361719] audit_buffer 7KB 7KB [ 3415.362386] skbuff_fclone_cache 105KB 105KB [ 3415.363053] skbuff_head_cache 704KB 780KB [ 3415.363721] file_lock_cache 74KB 74KB [ 3415.364393] file_lock_ctx 7KB 7KB [ 3415.365038] fsnotify_mark_connector 52KB 52KB [ 3415.365764] net_namespace 115KB 115KB [ 3415.366428] task_delay_info 108KB 108KB [ 3415.367075] taskstats 84KB 84KB [ 3415.367738] proc_dir_entry 329KB 363KB [ 3415.368412] pde_opener 47KB 47KB [ 3415.369057] seq_file 71KB 71KB [ 3415.369720] sigqueue 66KB 66KB [ 3415.370386] shmem_inode_cache 1287KB 1289KB [ 3415.371026] kernfs_iattrs_cache 239KB 239KB [ 3415.371711] kernfs_node_cache 5295KB 5295KB [ 3415.372382] mnt_cache 204KB 204KB [ 3415.373023] filp 1347KB 1942KB [ 3415.373688] names_cache 10671KB 11717KB [ 3415.374347] hashtab_node 274KB 274KB [ 3415.374987] ebitmap_node 1149KB 1149KB [ 3415.375653] avtab_node 4976KB 4976KB [ 3415.376321] avc_node 31KB 31KB [ 3415.376967] lsm_inode_cache 2668KB 2956KB [ 3415.377629] lsm_file_cache 106KB 160KB [ 3415.378292] key_jar 31KB 31KB [ 3415.378932] uts_namespace 15KB 15KB [ 3415.379592] nsproxy 7KB 7KB [ 3415.380265] vm_area_struct 747KB 964KB [ 3415.380901] fs_cache 88KB 88KB [ 3415.381559] files_cache 350KB 350KB [ 3415.382217] signal_cache 251KB 401KB [ 3415.382853] sighand_cache 309KB 330KB [ 3415.383507] task_struct 1017KB 1312KB [ 3415.384175] cred_jar 125KB 164KB [ 3415.384811] anon_vma_chain 154KB 232KB [ 3415.385466] anon_vma 186KB 215KB [ 3415.386103] pid 53KB 75KB [ 3415.386765] Acpi-Operand 207KB 237KB [ 3415.387419] Acpi-ParseExt 27KB 27KB [ 3415.388064] Acpi-Parse 146KB 162KB [ 3415.388723] Acpi-State 86KB 102KB [ 3415.389376] Acpi-Namespace 24KB 24KB [ 3415.390014] numa_policy 7KB 7KB [ 3415.390670] trace_event_file 176KB 176KB [ 3415.391333] ftrace_event_field 280KB 280KB [ 3415.391978] pool_workqueue 40KB 40KB [ 3415.392641] task_group 16KB 16KB [ 3415.393292] mm_struct 192KB 283KB [ 3415.393923] vmap_area 133KB 133KB [ 3415.394581] page->ptl 184KB 200KB [ 3415.395230] kmemleak_scan_area 159KB 159KB [ 3415.395932] kmemleak_object 130045KB 145959KB [ 3415.396595] kmalloc-8k 4576KB 4672KB [ 3415.397247] kmalloc-4k 8120KB 8392KB [ 3415.397878] kmalloc-2k 4064KB 4256KB [ 3415.398541] kmalloc-1k 2692KB 3456KB [ 3415.399194] kmalloc-512 3495KB 4432KB [ 3415.399823] kmalloc-256 1260KB 1336KB [ 3415.400485] kmalloc-192 400KB 660KB [ 3415.401136] kmalloc-128 432KB 548KB [ 3415.401768] kmalloc-96 459KB 736KB [ 3415.402420] kmalloc-64 938KB 1352KB [ 3415.403052] kmalloc-32 783KB 848KB [ 3415.403702] kmalloc-16 352KB 356KB [ 3415.404356] kmalloc-8 295KB 322KB [ 3415.404978] kmem_cache_node 47KB 47KB [ 3415.405629] kmem_cache 75KB 75KB [ 3415.406271] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/systemd-rfkill.service,task=systemd-rfkill,pid=16521,uid=0 [ 3415.408247] Out of memory (oom_kill_allocating_task): Killed process 16521 (systemd-rfkill) total-vm:4832kB, anon-rss:48kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:40kB oom_score_adj:0 [ 3415.462816] syz-executor.6: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz6,mems_allowed=0 [ 3415.464259] CPU: 1 PID: 16471 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 3415.465058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3415.466009] Call Trace: [ 3415.466324] dump_stack+0x107/0x167 [ 3415.466738] warn_alloc.cold+0x95/0x18a [ 3415.467199] ? zone_watermark_ok_safe+0x260/0x260 [ 3415.467754] ? queue_oom_reaper+0x86/0x1e0 [ 3415.468259] ? wait_for_completion_io+0x270/0x270 [ 3415.468819] __alloc_pages_slowpath.constprop.0+0x1cbe/0x2200 [ 3415.469499] ? lock_acquire+0x177/0x470 [ 3415.469954] ? warn_alloc+0x190/0x190 [ 3415.470396] __alloc_pages_nodemask+0x51d/0x600 [ 3415.470930] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3415.471549] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 3415.472247] ? policy_nodemask+0x5f/0x1a0 [ 3415.472720] ? __sanitizer_cov_trace_pc+0x45/0x60 [ 3415.473276] alloc_pages_current+0x187/0x280 [ 3415.473778] relay_open_buf.part.0+0x2a5/0xc00 [ 3415.474304] relay_open+0x531/0xa10 [ 3415.474729] do_blk_trace_setup+0x4cf/0xc10 [ 3415.475226] ? _copy_from_user+0xfb/0x1b0 [ 3415.475701] __blk_trace_setup+0xca/0x180 [ 3415.476180] ? do_blk_trace_setup+0xc10/0xc10 [ 3415.476701] blk_trace_ioctl+0x155/0x290 [ 3415.477165] ? blk_add_trace_bio_remap+0x5d0/0x5d0 [ 3415.477718] ? do_vfs_ioctl+0x283/0x10d0 [ 3415.478183] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 3415.478781] ? generic_block_fiemap+0x60/0x60 [ 3415.479287] ? lock_downgrade+0x6d0/0x6d0 [ 3415.479763] blkdev_ioctl+0xc1/0x710 [ 3415.480197] ? blkdev_common_ioctl+0x1930/0x1930 [ 3415.480738] ? selinux_file_ioctl+0xb6/0x270 [ 3415.481252] block_ioctl+0xf9/0x140 [ 3415.481668] ? blkdev_read_iter+0x1c0/0x1c0 [ 3415.482157] __x64_sys_ioctl+0x19a/0x210 [ 3415.482626] do_syscall_64+0x33/0x40 [ 3415.483051] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 3415.483630] RIP: 0033:0x7f8a57e45b19 [ 3415.484066] Code: Unable to access opcode bytes at RIP 0x7f8a57e45aef. [ 3415.484809] RSP: 002b:00007f8a553bb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3415.485684] RAX: ffffffffffffffda RBX: 00007f8a57f58f60 RCX: 00007f8a57e45b19 [ 3415.486493] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 3415.487305] RBP: 00007f8a57e9ff6d R08: 0000000000000000 R09: 0000000000000000 [ 3415.488118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3415.488931] R13: 00007ffc4a04e0af R14: 00007f8a553bb300 R15: 0000000000022000 [ 3415.489788] Mem-Info: [ 3415.490080] active_anon:42 inactive_anon:7540 isolated_anon:0 [ 3415.490080] active_file:0 inactive_file:16 isolated_file:0 [ 3415.490080] unevictable:0 dirty:0 writeback:0 [ 3415.490080] slab_reclaimable:6876 slab_unreclaimable:58331 [ 3415.490080] mapped:26114 shmem:89 pagetables:357 bounce:0 [ 3415.490080] free:2165 free_pcp:124 free_cma:0 [ 3415.493569] Node 0 active_anon:168kB inactive_anon:30160kB active_file:0kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104456kB dirty:0kB writeback:0kB shmem:356kB writeback_tmp:0kB kernel_stack:3296kB all_unreclaimable? yes [ 3415.496560] Node 0 DMA free:6488kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3415.499546] lowmem_reserve[]: 0 1616 1616 1616 [ 3415.500087] Node 0 DMA32 free:2172kB min:5116kB low:6768kB high:8420kB reserved_highatomic:0KB active_anon:168kB inactive_anon:30160kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:2080640kB managed:1660452kB mlocked:0kB pagetables:1428kB bounce:0kB free_pcp:496kB local_pcp:248kB free_cma:0kB [ 3415.503277] lowmem_reserve[]: 0 0 0 0 [ 3415.503725] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6488kB [ 3415.505261] Node 0 DMA32: 161*4kB (UME) 99*8kB (UME) 34*16kB (UM) 6*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2172kB [ 3415.506812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3415.507771] 148 total pagecache pages [ 3415.508217] 0 pages in swap cache [ 3415.508606] Swap cache stats: add 0, delete 0, find 0/0 [ 3415.509214] Free swap = 0kB [ 3415.509553] Total swap = 0kB [ 3415.509889] 524158 pages RAM [ 3415.510242] 0 pages HighMem/MovableOnly [ 3415.510691] 105068 pages reserved [ 3415.549348] systemd-rfkill (16521) used greatest stack depth: 23456 bytes left [ 3415.611195] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 3415.613063] systemd[1]: systemd-journald.service: Failed with result 'oom-kill'. [ 3415.627633] systemd[1]: systemd-journald.service: Consumed 7.246s CPU time. [ 3415.631192] systemd[1]: systemd-rfkill.service: Main process exited, code=killed, status=9/KILL [ 3415.633015] systemd[1]: systemd-rfkill.service: Failed with result 'oom-kill'. [ 3415.644237] systemd[1]: Failed to start Load/Save RF Kill Switch Status. [ 3415.646026] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. [ 3415.674447] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 3415.708802] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 3415.778034] systemd[1]: Stopped target Bluetooth. [ 3415.923933] systemd[1]: systemd-journal-flush.service: Succeeded. [ 3415.946670] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 3415.949793] systemd[1]: Started Load/Save RF Kill Switch Status. [ 3415.960831] systemd[1]: Stopped Journal Service. [ 3415.961692] systemd[1]: systemd-journald.service: Consumed 7.246s CPU time. [ 3415.983399] systemd[1]: Starting Journal Service... [ 3416.094019] systemd[1]: Started OpenBSD Secure Shell server. [ 3416.111781] systemd-journald[16530]: File /var/log/journal/7e681e5076844de4a5cfa8606a84b008/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 3416.803017] systemd[1]: Started Journal Service. [ 3416.896925] systemd-journald[16530]: Received client request to flush runtime journal. VM DIAGNOSIS: 12:15:47 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81473de8 RDX=ffff888008928000 RSI=ffffffff81473df1 RDI=0000000000000005 RBP=ffffffff816ce55b RSP=ffff888008937bd0 R8 =000000007f547f2e R9 =ffffffff85961310 R10=0000000000000000 R11=1ffff11001126f08 R12=ffff8880083fb280 R13=0000000000000200 R14=0000000000000292 R15=ffff888016d66280 RIP=ffffffff8140d0c4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbe94553230 CR3=000000000cd2a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=303030203a5841523d4547415353454d XMM01=30303030303030303030303030203a58 XMM02=203a5843522061393030303030303030 XMM03=323333336231303030303030203a5841 XMM04=f46c2fb89d51abc1000000000068cf48 XMM05=d3fdd5f48436fbd700000000000aeab0 XMM06=c12004c8b4eab06200000000000ae968 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=00002000000000000000200000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000003 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff88800b6d71b8 RDI=ffff888009233e18 RBP=ffff88800b6d71b8 RSP=ffff88801b18fb88 R8 =0000000000000000 R9 =ffffea0000d1e407 R10=0000000000000000 R11=0000000000000001 R12=ffff888009233480 R13=ffff888009233dc8 R14=00000000ffffffff R15=ffff888009233e18 RIP=ffffffff83e7bce2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fb4681d1900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb468ab75e0 CR3=000000000e090000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000000000000000ff XMM02=000000000000000000000000000000ff XMM03=66207463656e6e6f6373696420646576 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000 XMM08=736f6c63206e6f697463656e6e6f4300 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000