.558124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.558338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.558478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.558611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.558744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.558874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.559110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.591378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.593196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.596317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.596460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.596590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.596718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.596844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.596970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.597099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.597347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.608440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.609922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.610133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.633711] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1092.635733] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1092.637190] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1092.638586] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 1092.640510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.641900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.644436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.645931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.647533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.649088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.650574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.652041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.653473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.654998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.656317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.658485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.659782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.661126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.662435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.663939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.665480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.666799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.668087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.669425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.670727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.672007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.673383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.674681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.676526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.677862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.679397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.680727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.682117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.687940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.689436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.691621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.693124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.695447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.697120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.698440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.700033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.701350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.702697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.703964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.706395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.707827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.709855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.711543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.713139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.714572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.716019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.717438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.719060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.721041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.722641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.723917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.725377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.726657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.727965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.729294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.730586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.731989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.733802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.735378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.750148] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1092.752121] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1092.753501] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1092.754834] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 05:44:55 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:44:55 executing program 3: sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000240)) r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x8, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000080)="5a7a7011104b4cb840e7d8dd", 0xc, 0xfffffffffffffffc}, {&(0x7f0000000140)="5da4f011d9bee5b3afc1a5bb5c6dd50ec000dcb3a3474baa1d025435c197109ed08e89cef43cab2110ec213ebe956d710baa45954569a87feda6654160c24622b299dd6aaec79a7b8627646ac3349b01defc54b1b1bd58067b203b561f18e89ec6e8327ff32c23a8b0d2697e4ce9af0f4619235e172ff3d445d289c8795932360194ca1a66f5aa262a2e4f27be094a7be72baf4a9f9e36a4da39de27104ef3ec4f11c9164d4537d97699758be5c59f2dc7d0a11c935a4efe33d1fc102ae82e9f64e4de2fc72e0957b6", 0xc9, 0x9}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = syz_open_pts(r1, 0x100) lseek(r2, 0x8, 0x3) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r3, 0x0, 0x10000000c) ftruncate(r1, 0x1) rename(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='./file1\x00') 05:44:55 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_matches\x00') r2 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x10010, r0, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x9) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000900)={{r2}, "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"}) 05:44:55 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)=0x3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @out_args}, './file0\x00'}) close_range(r0, r1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000cc0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x0, 0x7, 0x81, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xd3, 0x40, 0x20e, 0x8, 0x3, 0x38, 0x2, 0x6, 0x6, 0x5}, [{0x6, 0xd61, 0x20, 0x7, 0x3, 0x5897, 0x6, 0x3}, {0x6, 0x7ff, 0x7fff, 0x7, 0x8, 0x2, 0x1968, 0x3e8d}], "46c7a6870bd5de11240a02fa5a73920ccdc61ec8d575372f92bd59e87ae0fdcb6330dcb76a152a2f06bf3a372789e315ae6ea6af4231069bd53902f0e576e6dfc36e22e860b065b062d1a46133f745903aed7afea7b644267c76533184179ae8ce73d314bcbca187452b1ee2e163101da1355d2aafbbb68895909f53120e7312721fb045d27e127882f907ff", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x73c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x800, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000001c0), 0xff, 0x80000) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x9, 0xff, 0x20, 0x2, 0x0, 0x3f, 0x69090, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x40000, 0x1, 0x28eb, 0x7, 0x3ff, 0x97, 0x5, 0x0, 0x2, 0x0, 0x6}, r3, 0x1, r4, 0x0) lseek(r0, 0x3, 0x4) write$binfmt_elf64(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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"}, 0x7de) 05:44:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:44:55 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x2bfff, 0x8001) 05:44:55 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 47) 05:44:55 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1105.944917] loop4: detected capacity change from 0 to 2097152 [ 1105.953155] FAULT_INJECTION: forcing a failure. [ 1105.953155] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1105.954593] CPU: 0 PID: 10127 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1105.955426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1105.955431] Call Trace: [ 1105.955449] dump_stack+0x107/0x167 [ 1105.955462] should_fail.cold+0x5/0xa [ 1105.955479] __alloc_pages_nodemask+0x182/0x600 [ 1105.955494] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1105.955510] ? find_get_entry+0x2c8/0x740 [ 1105.955521] ? exc_page_fault+0xca/0x1a0 [ 1105.955531] ? trace_hardirqs_on+0x5b/0x180 [ 1105.955548] alloc_pages_current+0x187/0x280 [ 1105.955562] __page_cache_alloc+0x2d2/0x360 [ 1105.955576] pagecache_get_page+0x2c7/0xc80 [ 1105.955590] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1105.955604] grab_cache_page_write_begin+0x64/0xa0 [ 1105.955618] simple_write_begin+0x30/0x2e0 [ 1105.955630] generic_perform_write+0x20a/0x4f0 [ 1105.955646] ? __mnt_drop_write_file+0x9/0x70 [ 1105.955656] ? page_cache_prev_miss+0x310/0x310 [ 1105.955667] ? evict_inodes+0x470/0x470 [ 1105.955680] ? generic_write_checks+0x2ad/0x390 [ 1105.955695] __generic_file_write_iter+0x39d/0x5d0 [ 1105.955710] generic_file_write_iter+0xdb/0x230 [ 1105.955719] ? iov_iter_init+0x3c/0x130 [ 1105.955733] new_sync_write+0x42c/0x660 [ 1105.955745] ? new_sync_read+0x6f0/0x6f0 [ 1105.955755] ? __x64_sys_pwrite64+0x201/0x260 [ 1105.955770] ? lock_release+0x680/0x680 [ 1105.955781] ? avc_policy_seqno+0x9/0x70 [ 1105.955791] ? selinux_file_permission+0x92/0x520 [ 1105.955805] ? security_file_permission+0xb1/0xe0 [ 1105.955820] vfs_write+0x7c0/0xb10 [ 1105.955833] __x64_sys_pwrite64+0x201/0x260 [ 1105.955843] ? ksys_pwrite64+0x1b0/0x1b0 [ 1105.955856] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1105.955867] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1105.955881] do_syscall_64+0x33/0x40 [ 1105.955905] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1105.976483] RIP: 0033:0x7f3eb14f5b19 [ 1105.976495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1105.976501] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1105.976512] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1105.976518] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1105.976524] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.976531] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1105.976537] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1105.980931] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1105.980938] EXT4-fs (loop4): group descriptors corrupted! 05:44:55 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:44:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r1, &(0x7f0000000140)="b2", 0x20000141, 0x8001) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040), 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xe, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in=@local}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0x14c) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r3, r2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = socket$inet(0x2, 0x800, 0x5) sendfile(r0, r4, 0x0, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 05:44:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:44:55 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:44:55 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x2cfff, 0x8001) 05:44:55 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:44:55 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:44:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1106.212482] loop4: detected capacity change from 0 to 2097152 [ 1106.218324] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1106.219458] EXT4-fs (loop4): group descriptors corrupted! 05:45:08 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x2dfff, 0x8001) 05:45:08 executing program 5: openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x420002, 0x81) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x312}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000b40)="8726726db2e268aef6af859b15b8914ff16bfc724208dd1c0ce506142429e8f35a7a671cea284e02f560bfa6c125df683e55dd59b87d1fa1c60c8d2c50f817b58208513c2418adb046189a22d2982cb09aa64290d5ab3a624ea53b331ae0e1159dc183d8", 0x64}], 0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3801c304}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xab, 0x0, 0xac, 0x3, 0x0, 0x9, 0x14242, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7a6, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x1, 0x800, 0xff, 0x5, 0x9, 0x2be, 0x8, 0x0, 0x8, 0x0, 0x7a3a}, 0x0, 0x7, 0xffffffffffffffff, 0x8) io_uring_enter(0xffffffffffffffff, 0x250e, 0x0, 0x2, &(0x7f0000000280)={[0x7e]}, 0x8) r2 = signalfd4(r1, &(0x7f0000000140)={[0x1]}, 0x8, 0x800) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40ffffffffffff, 0x0, 0x0, 0x1000004, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r2, 0x7f, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1001000, &(0x7f00000001c0)=ANY=[]) epoll_create(0x81) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffe3) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x20010, 0xffffffffffffffff, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae5dfaf481bcebc82f7ace0d76f7b9326a416456f7ba49", 0x90, 0x40000040, 0x0, {0x0, r6}}, 0x9) sendfile(r2, 0xffffffffffffffff, &(0x7f00000003c0)=0x9, 0x3) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0x0, 0x11, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="d75d086394a949e5648d0693b6751201b4", 0x0, 0x0, 0x0, 0x0, 0x0}) 05:45:08 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:08 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:45:08 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 48) [ 1119.639054] FAULT_INJECTION: forcing a failure. [ 1119.639054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.640460] CPU: 1 PID: 10169 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1119.641254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1119.642213] Call Trace: [ 1119.642522] dump_stack+0x107/0x167 [ 1119.642957] should_fail.cold+0x5/0xa [ 1119.643405] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1119.644025] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1119.644615] ? simple_write_begin+0x109/0x2e0 [ 1119.645131] generic_perform_write+0x279/0x4f0 [ 1119.645665] ? page_cache_prev_miss+0x310/0x310 [ 1119.646205] ? evict_inodes+0x470/0x470 [ 1119.646675] ? generic_write_checks+0x2ad/0x390 [ 1119.647219] __generic_file_write_iter+0x39d/0x5d0 [ 1119.647785] generic_file_write_iter+0xdb/0x230 [ 1119.648318] ? iov_iter_init+0x3c/0x130 [ 1119.648782] new_sync_write+0x42c/0x660 [ 1119.649244] ? new_sync_read+0x6f0/0x6f0 [ 1119.649709] ? __x64_sys_pwrite64+0x201/0x260 [ 1119.650240] ? lock_release+0x680/0x680 [ 1119.650706] ? avc_policy_seqno+0x9/0x70 [ 1119.651174] ? selinux_file_permission+0x92/0x520 [ 1119.651735] ? security_file_permission+0xb1/0xe0 [ 1119.652295] vfs_write+0x7c0/0xb10 [ 1119.652712] __x64_sys_pwrite64+0x201/0x260 [ 1119.653210] ? ksys_pwrite64+0x1b0/0x1b0 [ 1119.653685] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1119.654294] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1119.654903] do_syscall_64+0x33/0x40 [ 1119.655334] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1119.655923] RIP: 0033:0x7f3eb14f5b19 [ 1119.656353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1119.658487] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1119.659378] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1119.660199] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1119.661019] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1119.661840] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1119.662673] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:45:08 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1119.680733] loop4: detected capacity change from 0 to 2097152 [ 1119.697142] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1119.698253] EXT4-fs (loop4): group descriptors corrupted! 05:45:08 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:09 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1119.761158] EXT4-fs (sda): re-mounted. Opts: (null) 05:45:09 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:09 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x2efff, 0x8001) [ 1119.812041] EXT4-fs (sda): re-mounted. Opts: (null) 05:45:09 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000010000000400000016000f00", 0x10, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:45:09 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:09 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r2, &(0x7f0000000140)="b2", 0x20000141, 0x8001) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x100000001) 05:45:09 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1119.900414] loop4: detected capacity change from 0 to 2097152 [ 1119.928323] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1119.930026] EXT4-fs (loop4): group descriptors corrupted! 05:45:09 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:23 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x2ffff, 0x8001) 05:45:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x400100, 0x12) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x133100, 0x100) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85e, 0x40400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0x4}, 0x0, 0x400000000000001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffbffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x803, 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000180)='\x00'], &(0x7f0000000340)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='{N/#+:{[{(+,/\x00', &(0x7f0000000300)='+\x00']) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x43c003, 0x0) 05:45:23 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 49) 05:45:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:45:23 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:23 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0x7, 0x0, 0x0, 0x11}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x1}, 0x4) fsmount(r0, 0x0, 0x8) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x4d, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r6}}, 0x6) syz_io_uring_submit(r2, 0x0, &(0x7f00000007c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000800), &(0x7f0000000280)='./file0/file0\x00', 0x1, 0x800}, 0x3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r7, &(0x7f0000000140)="b2", 0x20000141, 0x8001) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x0, 0x4, 0x4, 0x0, 0x800, 0x34df73a6ea1d8fc7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x0, @perf_config_ext={0x20, 0x7fff}, 0x1, 0x7f, 0x8d42, 0x8, 0x9, 0x8001, 0x100, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x8, r7, 0x8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10) 05:45:23 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:23 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1133.971705] loop4: detected capacity change from 0 to 2097152 [ 1133.999611] FAULT_INJECTION: forcing a failure. [ 1133.999611] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1134.002334] CPU: 0 PID: 10227 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1134.003837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1134.005623] Call Trace: [ 1134.006199] dump_stack+0x107/0x167 [ 1134.007008] should_fail.cold+0x5/0xa [ 1134.007839] __alloc_pages_nodemask+0x182/0x600 [ 1134.008853] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1134.010156] ? find_get_entry+0x2c8/0x740 [ 1134.011060] ? exc_page_fault+0xca/0x1a0 [ 1134.011934] ? trace_hardirqs_on+0x5b/0x180 [ 1134.012877] alloc_pages_current+0x187/0x280 [ 1134.013830] __page_cache_alloc+0x2d2/0x360 [ 1134.014773] pagecache_get_page+0x2c7/0xc80 [ 1134.015716] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1134.016809] grab_cache_page_write_begin+0x64/0xa0 [ 1134.017876] simple_write_begin+0x30/0x2e0 [ 1134.018802] generic_perform_write+0x20a/0x4f0 [ 1134.019801] ? __mnt_drop_write_file+0x9/0x70 [ 1134.020774] ? page_cache_prev_miss+0x310/0x310 [ 1134.021783] ? evict_inodes+0x470/0x470 [ 1134.022645] ? generic_write_checks+0x2ad/0x390 [ 1134.023671] __generic_file_write_iter+0x39d/0x5d0 [ 1134.024735] generic_file_write_iter+0xdb/0x230 [ 1134.025740] ? iov_iter_init+0x3c/0x130 [ 1134.026597] new_sync_write+0x42c/0x660 [ 1134.027468] ? new_sync_read+0x6f0/0x6f0 [ 1134.028340] ? __x64_sys_pwrite64+0x201/0x260 [ 1134.029317] ? lock_release+0x680/0x680 [ 1134.030175] ? avc_policy_seqno+0x9/0x70 [ 1134.031063] ? selinux_file_permission+0x92/0x520 [ 1134.032109] ? security_file_permission+0xb1/0xe0 [ 1134.033156] vfs_write+0x7c0/0xb10 [ 1134.033928] __x64_sys_pwrite64+0x201/0x260 [ 1134.034873] ? ksys_pwrite64+0x1b0/0x1b0 [ 1134.035754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1134.036890] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1134.038012] do_syscall_64+0x33/0x40 [ 1134.038831] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1134.039936] RIP: 0033:0x7f3eb14f5b19 [ 1134.040739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.044727] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1134.046368] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1134.047915] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1134.049625] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.051192] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1134.052744] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1134.064443] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1134.066370] EXT4-fs (loop4): group descriptors corrupted! 05:45:23 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:23 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:23 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:23 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:23 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 50) 05:45:23 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x30fff, 0x8001) 05:45:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:45:23 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, @perf_bp={0x0}, 0x4000, 0x4, 0x0, 0x0, 0xf31}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file2\x00', 0x400000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000001000000000000000000000000000000000000000000c7e2c2ff9a552a225ab6bfeba4142576d2612b2c5cad487b"]) mkdirat(r4, &(0x7f0000000080)='./file0\x00', 0x27) ioctl$CDROMPLAYMSF(r3, 0x5303, &(0x7f00000001c0)={0x7f, 0x1d, 0xf7, 0x7, 0x8, 0x7}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xffffffff) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x1f31, &(0x7f0000000000)={0x0, 0x29ff, 0x1, 0x0, 0x353}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, 0x0, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r2) fcntl$notify(0xffffffffffffffff, 0x402, 0x12) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1134.290434] FAULT_INJECTION: forcing a failure. [ 1134.290434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1134.292982] CPU: 0 PID: 10247 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1134.294441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1134.296203] Call Trace: [ 1134.296768] dump_stack+0x107/0x167 [ 1134.297556] should_fail.cold+0x5/0xa [ 1134.298369] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1134.299533] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1134.300595] ? simple_write_begin+0x109/0x2e0 [ 1134.301548] generic_perform_write+0x279/0x4f0 [ 1134.302525] ? __mnt_drop_write_file+0x9/0x70 [ 1134.303483] ? page_cache_prev_miss+0x310/0x310 [ 1134.304471] ? evict_inodes+0x470/0x470 [ 1134.305321] ? generic_write_checks+0x2ad/0x390 [ 1134.306340] __generic_file_write_iter+0x39d/0x5d0 [ 1134.307385] generic_file_write_iter+0xdb/0x230 [ 1134.308371] ? iov_iter_init+0x3c/0x130 [ 1134.309229] new_sync_write+0x42c/0x660 [ 1134.310088] ? new_sync_read+0x6f0/0x6f0 [ 1134.310970] ? __x64_sys_pwrite64+0x201/0x260 [ 1134.311946] ? lock_release+0x680/0x680 [ 1134.312807] ? avc_policy_seqno+0x9/0x70 [ 1134.313669] ? selinux_file_permission+0x92/0x520 [ 1134.314713] ? security_file_permission+0xb1/0xe0 [ 1134.315770] vfs_write+0x7c0/0xb10 [ 1134.316527] __x64_sys_pwrite64+0x201/0x260 [ 1134.317450] ? ksys_pwrite64+0x1b0/0x1b0 [ 1134.318302] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1134.319412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1134.320526] do_syscall_64+0x33/0x40 [ 1134.321321] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1134.322399] RIP: 0033:0x7f3eb14f5b19 [ 1134.323201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1134.327178] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1134.328804] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1134.330322] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1134.331840] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1134.333344] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1134.334854] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:45:37 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:45:37 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 51) 05:45:37 executing program 3: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffb8, 0x0, 0x0, &(0x7f00000005c0)=ANY=[]) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) futimesat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@fuse_with_parent={0x18}, &(0x7f0000000140), 0x0) 05:45:37 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0x7, 0x0, 0x0, 0x11}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x0, 0x1}, 0x4) fsmount(r0, 0x0, 0x8) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x4d, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r6}}, 0x6) syz_io_uring_submit(r2, 0x0, &(0x7f00000007c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000800), &(0x7f0000000280)='./file0/file0\x00', 0x1, 0x800}, 0x3) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r7, &(0x7f0000000140)="b2", 0x20000141, 0x8001) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x0, 0x4, 0x4, 0x0, 0x800, 0x34df73a6ea1d8fc7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10000, 0x0, @perf_config_ext={0x20, 0x7fff}, 0x1, 0x7f, 0x8d42, 0x8, 0x9, 0x8001, 0x100, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x8, r7, 0x8) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10) 05:45:37 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:37 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:45:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x31fff, 0x8001) [ 1148.219471] FAULT_INJECTION: forcing a failure. [ 1148.219471] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1148.222099] CPU: 0 PID: 10262 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1148.223598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1148.225366] Call Trace: [ 1148.225943] dump_stack+0x107/0x167 [ 1148.226738] should_fail.cold+0x5/0xa [ 1148.227601] __alloc_pages_nodemask+0x182/0x600 [ 1148.228739] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1148.230151] ? find_get_entry+0x2c8/0x740 [ 1148.231251] ? exc_page_fault+0xca/0x1a0 [ 1148.232183] ? trace_hardirqs_on+0x5b/0x180 [ 1148.233335] alloc_pages_current+0x187/0x280 [ 1148.234326] __page_cache_alloc+0x2d2/0x360 [ 1148.235495] pagecache_get_page+0x2c7/0xc80 [ 1148.236431] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1148.237770] grab_cache_page_write_begin+0x64/0xa0 [ 1148.238938] simple_write_begin+0x30/0x2e0 [ 1148.240052] generic_perform_write+0x20a/0x4f0 [ 1148.241052] ? page_cache_prev_miss+0x310/0x310 [ 1148.242073] ? evict_inodes+0x470/0x470 [ 1148.242932] ? generic_write_checks+0x2ad/0x390 [ 1148.243948] __generic_file_write_iter+0x39d/0x5d0 [ 1148.245002] generic_file_write_iter+0xdb/0x230 [ 1148.245990] ? iov_iter_init+0x3c/0x130 [ 1148.246888] new_sync_write+0x42c/0x660 [ 1148.247762] ? new_sync_read+0x6f0/0x6f0 [ 1148.248638] ? __x64_sys_pwrite64+0x201/0x260 [ 1148.249600] ? lock_release+0x680/0x680 [ 1148.250440] ? avc_policy_seqno+0x9/0x70 [ 1148.251312] ? selinux_file_permission+0x92/0x520 [ 1148.252343] ? security_file_permission+0xb1/0xe0 [ 1148.253392] vfs_write+0x7c0/0xb10 [ 1148.254325] __x64_sys_pwrite64+0x201/0x260 [ 1148.255350] ? ksys_pwrite64+0x1b0/0x1b0 [ 1148.256423] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1148.257647] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1148.259021] do_syscall_64+0x33/0x40 [ 1148.259892] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1148.261248] RIP: 0033:0x7f3eb14f5b19 [ 1148.262051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1148.266907] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1148.268903] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1148.270778] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1148.272661] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.274539] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1148.276433] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1148.295527] loop4: detected capacity change from 0 to 2097152 05:45:37 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:45:37 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x32fff, 0x8001) 05:45:37 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1148.305858] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1148.307123] EXT4-fs (loop4): group descriptors corrupted! 05:45:37 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:37 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:45:37 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = inotify_init1(0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000480)='./file1\x00', 0xc40004a2) inotify_add_watch(r0, &(0x7f0000000080)='./file1\x00', 0x1000100) creat(&(0x7f0000000000)='./file1\x00', 0x0) 05:45:37 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 52) 05:45:37 executing program 5: r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) ioctl$CDROM_NEXT_WRITABLE(r0, 0x5394, &(0x7f00000000c0)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) getsockname(r1, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80) [ 1148.417571] FAULT_INJECTION: forcing a failure. [ 1148.417571] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:45:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000001000000", 0x8, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1148.419053] CPU: 1 PID: 10286 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1148.420107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1148.421084] Call Trace: [ 1148.421402] dump_stack+0x107/0x167 [ 1148.421834] should_fail.cold+0x5/0xa [ 1148.422287] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1148.422930] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1148.423540] ? simple_write_begin+0x109/0x2e0 [ 1148.424069] generic_perform_write+0x279/0x4f0 [ 1148.424623] ? page_cache_prev_miss+0x310/0x310 [ 1148.425172] ? evict_inodes+0x470/0x470 [ 1148.425638] ? generic_write_checks+0x2ad/0x390 [ 1148.426188] __generic_file_write_iter+0x39d/0x5d0 [ 1148.426768] generic_file_write_iter+0xdb/0x230 [ 1148.427321] ? iov_iter_init+0x3c/0x130 [ 1148.427801] new_sync_write+0x42c/0x660 [ 1148.428270] ? new_sync_read+0x6f0/0x6f0 [ 1148.428750] ? __x64_sys_pwrite64+0x201/0x260 [ 1148.429280] ? lock_release+0x680/0x680 [ 1148.429750] ? avc_policy_seqno+0x9/0x70 [ 1148.430224] ? selinux_file_permission+0x92/0x520 [ 1148.430796] ? security_file_permission+0xb1/0xe0 [ 1148.431380] vfs_write+0x7c0/0xb10 [ 1148.431799] __x64_sys_pwrite64+0x201/0x260 [ 1148.432300] ? ksys_pwrite64+0x1b0/0x1b0 [ 1148.432780] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1148.433408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1148.434024] do_syscall_64+0x33/0x40 [ 1148.434458] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1148.435062] RIP: 0033:0x7f3eb14f5b19 [ 1148.435495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1148.437649] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1148.438539] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1148.439378] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1148.440207] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1148.441039] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1148.441878] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1148.498460] loop4: detected capacity change from 0 to 2097152 [ 1148.515304] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1148.516534] EXT4-fs (loop4): group descriptors corrupted! 05:45:50 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 53) 05:45:50 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1161.753102] FAULT_INJECTION: forcing a failure. [ 1161.753102] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.754615] CPU: 0 PID: 10306 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1161.755397] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1161.756314] Call Trace: [ 1161.756613] dump_stack+0x107/0x167 [ 1161.757018] should_fail.cold+0x5/0xa [ 1161.757441] should_failslab+0x5/0x20 [ 1161.757864] kmem_cache_alloc_bulk+0x4b/0x320 [ 1161.758366] io_submit_sqes+0x6fe4/0x8610 [ 1161.758843] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1161.759398] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1161.759936] ? find_held_lock+0x2c/0x110 [ 1161.760385] ? io_submit_sqes+0x8610/0x8610 [ 1161.760865] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1161.761400] ? wait_for_completion_io+0x270/0x270 [ 1161.761939] ? rcu_read_lock_any_held+0x75/0xa0 [ 1161.762452] ? vfs_write+0x354/0xb10 [ 1161.762863] ? fput_many+0x2f/0x1a0 [ 1161.763270] ? ksys_write+0x1a9/0x260 [ 1161.763689] ? __ia32_sys_read+0xb0/0xb0 [ 1161.764142] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1161.764729] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1161.765302] do_syscall_64+0x33/0x40 [ 1161.765712] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1161.766281] RIP: 0033:0x7f336a295b19 [ 1161.766693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1161.768743] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1161.769580] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1161.770362] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1161.771158] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.771947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.772733] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 05:45:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:45:50 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x33fff, 0x8001) 05:45:50 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:50 executing program 5: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) add_key(&(0x7f0000000080)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000240)="8d69e2de849c61d5698bcf96bcabe942b5909dd0f20416ecb71a2d0e7d0aeebef0c07b58f9f5907d87322b6cf72145b050c1af7ad44f78c07d2dfd706ffe9909c1ece19f828decf2e81a9ad35278b25582f75a038741bbfe2165c6e269120e18dc39a12a96f77a22b7863db14e33ae6309151c3efbe8ee8039f2d2fa8722ed2219176a8bf284a8fde76b686b", 0xfffffd6f, 0xfffffffffffffffc) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000000380)) lseek(0xffffffffffffffff, 0x20, 0xffffffffffffffff) timer_settime(r0, 0x0, 0x0, 0x0) timer_delete(r0) timer_gettime(0x0, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) timer_create(0x0, &(0x7f0000000340)={0x0, 0x33, 0x4, @tid=r1}, &(0x7f00000003c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4059, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) 05:45:50 executing program 3: r0 = clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = gettid() r2 = gettid() ptrace(0x4208, r2) clone3(&(0x7f000000c040)={0x140941000, &(0x7f0000005800), &(0x7f0000005840), 0x0, {}, &(0x7f00000058c0)=""/76, 0x4c, &(0x7f0000005940)=""/157, &(0x7f0000008300)=[0x0, 0x0, r1, 0x0, 0x0], 0x5}, 0x58) r3 = gettid() clone3(&(0x7f000000c040)={0x140941000, &(0x7f0000005800), &(0x7f0000005840), 0x0, {}, &(0x7f00000058c0)=""/76, 0x4c, &(0x7f0000005940)=""/157, &(0x7f0000008300)=[0x0, 0x0, r3, 0x0, 0x0], 0x5}, 0x58) r4 = gettid() clone3(&(0x7f000000c040)={0x140941000, &(0x7f0000005800), &(0x7f0000005840), 0x0, {}, &(0x7f00000058c0)=""/76, 0x4c, &(0x7f0000005940)=""/157, &(0x7f0000008300)=[0x0, 0x0, r4, 0x0, 0x0], 0x5}, 0x58) clone3(&(0x7f0000000200)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x26}, &(0x7f00000000c0)=""/193, 0xc1, &(0x7f0000000340)=""/4096, &(0x7f00000001c0)=[r0, r0, r1, r3, r0, r4], 0x6}, 0x58) 05:45:50 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 1161.786880] loop4: detected capacity change from 0 to 2097152 [ 1161.791560] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1161.792577] EXT4-fs (loop4): group descriptors corrupted! [ 1161.793627] FAULT_INJECTION: forcing a failure. [ 1161.793627] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1161.794999] CPU: 0 PID: 10315 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1161.795774] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1161.796695] Call Trace: [ 1161.796995] dump_stack+0x107/0x167 [ 1161.797402] should_fail.cold+0x5/0xa [ 1161.797829] __alloc_pages_nodemask+0x182/0x600 [ 1161.798350] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1161.799024] ? find_get_entry+0x2c8/0x740 [ 1161.799485] ? exc_page_fault+0xca/0x1a0 [ 1161.799934] ? trace_hardirqs_on+0x5b/0x180 [ 1161.800424] alloc_pages_current+0x187/0x280 [ 1161.800915] __page_cache_alloc+0x2d2/0x360 [ 1161.801397] pagecache_get_page+0x2c7/0xc80 [ 1161.801878] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1161.802447] grab_cache_page_write_begin+0x64/0xa0 [ 1161.802996] simple_write_begin+0x30/0x2e0 [ 1161.803476] generic_perform_write+0x20a/0x4f0 [ 1161.803985] ? __mnt_drop_write_file+0x9/0x70 [ 1161.804478] ? page_cache_prev_miss+0x310/0x310 [ 1161.804996] ? evict_inodes+0x470/0x470 [ 1161.805436] ? generic_write_checks+0x2ad/0x390 [ 1161.805955] __generic_file_write_iter+0x39d/0x5d0 [ 1161.806502] generic_file_write_iter+0xdb/0x230 [ 1161.807024] ? iov_iter_init+0x3c/0x130 [ 1161.807471] new_sync_write+0x42c/0x660 [ 1161.807915] ? new_sync_read+0x6f0/0x6f0 [ 1161.808365] ? __x64_sys_pwrite64+0x201/0x260 [ 1161.808863] ? lock_release+0x680/0x680 [ 1161.809307] ? avc_policy_seqno+0x9/0x70 [ 1161.809758] ? selinux_file_permission+0x92/0x520 [ 1161.810294] ? security_file_permission+0xb1/0xe0 [ 1161.810828] vfs_write+0x7c0/0xb10 [ 1161.811234] __x64_sys_pwrite64+0x201/0x260 [ 1161.811711] ? ksys_pwrite64+0x1b0/0x1b0 [ 1161.812164] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1161.812747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1161.813320] do_syscall_64+0x33/0x40 [ 1161.813733] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1161.814303] RIP: 0033:0x7f3eb14f5b19 [ 1161.814714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1161.816760] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1161.817600] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1161.818383] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1161.819174] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.819958] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1161.820743] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:45:51 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:51 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 05:45:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1161.891197] FAULT_INJECTION: forcing a failure. [ 1161.891197] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.892585] CPU: 0 PID: 10324 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1161.893382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1161.894340] Call Trace: [ 1161.894649] dump_stack+0x107/0x167 [ 1161.895091] should_fail.cold+0x5/0xa [ 1161.895538] ? create_object.isra.0+0x3a/0xa30 [ 1161.896062] should_failslab+0x5/0x20 [ 1161.896505] kmem_cache_alloc+0x5b/0x310 [ 1161.896976] create_object.isra.0+0x3a/0xa30 [ 1161.897479] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1161.898065] kmem_cache_alloc_bulk+0x168/0x320 [ 1161.898605] io_submit_sqes+0x6fe4/0x8610 [ 1161.899120] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1161.899696] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1161.900256] ? find_held_lock+0x2c/0x110 [ 1161.900727] ? io_submit_sqes+0x8610/0x8610 [ 1161.901230] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1161.901789] ? wait_for_completion_io+0x270/0x270 [ 1161.902351] ? rcu_read_lock_any_held+0x75/0xa0 [ 1161.902884] ? vfs_write+0x354/0xb10 [ 1161.903334] ? fput_many+0x2f/0x1a0 [ 1161.903752] ? ksys_write+0x1a9/0x260 [ 1161.904189] ? __ia32_sys_read+0xb0/0xb0 [ 1161.904660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1161.905265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1161.905865] do_syscall_64+0x33/0x40 [ 1161.906295] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1161.906888] RIP: 0033:0x7f336a295b19 [ 1161.907339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1161.909462] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1161.910343] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1161.911187] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1161.912007] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.912830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.913657] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 05:45:51 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:45:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 54) [ 1161.928485] loop4: detected capacity change from 0 to 2097152 [ 1161.933943] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1161.935028] EXT4-fs (loop4): group descriptors corrupted! 05:45:51 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:45:51 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x34fff, 0x8001) [ 1161.986802] loop4: detected capacity change from 0 to 2097152 [ 1161.993171] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1161.994256] EXT4-fs (loop4): group descriptors corrupted! [ 1162.115624] FAULT_INJECTION: forcing a failure. [ 1162.115624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.118177] CPU: 1 PID: 10339 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1162.119639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1162.121377] Call Trace: [ 1162.121953] dump_stack+0x107/0x167 [ 1162.122731] should_fail.cold+0x5/0xa [ 1162.123562] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1162.124690] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1162.125770] ? simple_write_begin+0x109/0x2e0 [ 1162.126725] generic_perform_write+0x279/0x4f0 [ 1162.127712] ? __mnt_drop_write_file+0x9/0x70 [ 1162.128668] ? page_cache_prev_miss+0x310/0x310 [ 1162.129656] ? evict_inodes+0x470/0x470 [ 1162.130509] ? generic_write_checks+0x2ad/0x390 [ 1162.131729] __generic_file_write_iter+0x39d/0x5d0 [ 1162.132783] generic_file_write_iter+0xdb/0x230 [ 1162.133768] ? iov_iter_init+0x3c/0x130 [ 1162.134623] new_sync_write+0x42c/0x660 [ 1162.135479] ? new_sync_read+0x6f0/0x6f0 [ 1162.136333] ? __x64_sys_pwrite64+0x201/0x260 [ 1162.137286] ? lock_release+0x680/0x680 [ 1162.138124] ? avc_policy_seqno+0x9/0x70 [ 1162.138990] ? selinux_file_permission+0x92/0x520 [ 1162.140022] ? security_file_permission+0xb1/0xe0 [ 1162.141052] vfs_write+0x7c0/0xb10 [ 1162.141821] __x64_sys_pwrite64+0x201/0x260 [ 1162.142736] ? ksys_pwrite64+0x1b0/0x1b0 [ 1162.143622] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1162.144731] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1162.145825] do_syscall_64+0x33/0x40 [ 1162.146613] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1162.147695] RIP: 0033:0x7f3eb14f5b19 [ 1162.148478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1162.152319] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1162.153914] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1162.155422] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1162.156928] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.158425] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1162.159932] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:46:07 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 55) 05:46:07 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:46:07 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 05:46:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r3, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x28000120}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}]}]}, 0x40}}, 0x44400) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000000c0)={[{@nombcache}]}) 05:46:07 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000", 0x4, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:46:07 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:46:07 executing program 5: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xfe}}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x14, 0x4, 0x20, 0x7, 0x0, 0x44, 0x21401, 0xe, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x1000, 0x20000000, 0x52, 0x1, 0x59a, 0x1ff, 0x3f, 0x0, 0xffffffe1, 0x0, 0x7fff}, 0x0, 0x0, r2, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/72, 0x48}], 0x1) 05:46:07 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x35fff, 0x8001) [ 1178.595578] FAULT_INJECTION: forcing a failure. [ 1178.595578] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.598696] CPU: 0 PID: 10359 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1178.599854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1178.601227] Call Trace: [ 1178.601661] dump_stack+0x107/0x167 [ 1178.602262] should_fail.cold+0x5/0xa [ 1178.602909] ? create_object.isra.0+0x3a/0xa30 [ 1178.603661] should_failslab+0x5/0x20 [ 1178.604285] kmem_cache_alloc+0x5b/0x310 [ 1178.604953] ? mark_held_locks+0x9e/0xe0 [ 1178.605628] create_object.isra.0+0x3a/0xa30 [ 1178.606354] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1178.607200] kmem_cache_alloc_bulk+0x168/0x320 [ 1178.607963] io_submit_sqes+0x6fe4/0x8610 [ 1178.608672] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1178.609494] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1178.610290] ? find_held_lock+0x2c/0x110 [ 1178.610978] ? io_submit_sqes+0x8610/0x8610 [ 1178.611697] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1178.612491] ? wait_for_completion_io+0x270/0x270 [ 1178.613286] ? rcu_read_lock_any_held+0x75/0xa0 [ 1178.614041] ? vfs_write+0x354/0xb10 [ 1178.614658] ? fput_many+0x2f/0x1a0 [ 1178.615254] ? ksys_write+0x1a9/0x260 [ 1178.615868] ? __ia32_sys_read+0xb0/0xb0 [ 1178.616534] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1178.617393] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1178.618241] do_syscall_64+0x33/0x40 [ 1178.618856] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1178.619709] RIP: 0033:0x7f336a295b19 [ 1178.620312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1178.623338] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1178.624570] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1178.625741] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1178.626913] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.628072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.629227] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 [ 1178.636650] FAULT_INJECTION: forcing a failure. [ 1178.636650] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1178.639284] CPU: 1 PID: 10358 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1178.640760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1178.642526] Call Trace: [ 1178.643090] dump_stack+0x107/0x167 [ 1178.643876] should_fail.cold+0x5/0xa [ 1178.644695] __alloc_pages_nodemask+0x182/0x600 [ 1178.645693] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1178.646970] ? find_get_entry+0x2c8/0x740 [ 1178.647853] ? exc_page_fault+0xca/0x1a0 [ 1178.648714] ? trace_hardirqs_on+0x5b/0x180 [ 1178.649635] alloc_pages_current+0x187/0x280 [ 1178.650585] __page_cache_alloc+0x2d2/0x360 [ 1178.651514] pagecache_get_page+0x2c7/0xc80 [ 1178.652436] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1178.653526] grab_cache_page_write_begin+0x64/0xa0 [ 1178.654574] simple_write_begin+0x30/0x2e0 [ 1178.655481] generic_perform_write+0x20a/0x4f0 [ 1178.656460] ? __mnt_drop_write_file+0x9/0x70 [ 1178.657412] ? page_cache_prev_miss+0x310/0x310 [ 1178.658400] ? evict_inodes+0x470/0x470 [ 1178.659272] ? generic_write_checks+0x2ad/0x390 [ 1178.660275] __generic_file_write_iter+0x39d/0x5d0 [ 1178.661325] generic_file_write_iter+0xdb/0x230 [ 1178.662309] ? iov_iter_init+0x3c/0x130 [ 1178.663161] new_sync_write+0x42c/0x660 [ 1178.664023] ? new_sync_read+0x6f0/0x6f0 [ 1178.664883] ? __x64_sys_pwrite64+0x201/0x260 [ 1178.665839] ? lock_release+0x680/0x680 [ 1178.666690] ? avc_policy_seqno+0x9/0x70 [ 1178.667559] ? selinux_file_permission+0x92/0x520 [ 1178.668590] ? security_file_permission+0xb1/0xe0 [ 1178.669616] vfs_write+0x7c0/0xb10 [ 1178.670376] __x64_sys_pwrite64+0x201/0x260 [ 1178.671295] ? ksys_pwrite64+0x1b0/0x1b0 [ 1178.672161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1178.673282] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1178.674385] do_syscall_64+0x33/0x40 [ 1178.675201] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1178.676295] RIP: 0033:0x7f3eb14f5b19 [ 1178.677090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1178.681021] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1178.682655] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1178.684190] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1178.685713] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.687238] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1178.688761] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1178.693743] loop4: detected capacity change from 0 to 2097152 05:46:07 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x36fff, 0x8001) 05:46:07 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES64=r0, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="18005a805cdcc01fae140000800502040008"], 0x34}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xc53, 0x1f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4b5735ef, 0x46}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4840}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000280)=0x1, 0x4) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000800)={0x1, 0x0, "17f042"}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0100001501000000180007005a4b8829f258532a2bd200", @ANYRES32, @ANYBLOB="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"]) 05:46:07 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 05:46:07 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1178.732346] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1178.734389] EXT4-fs (loop4): group descriptors corrupted! [ 1178.744813] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1178.764800] FAULT_INJECTION: forcing a failure. [ 1178.764800] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.767341] CPU: 1 PID: 10378 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1178.768818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1178.770579] Call Trace: [ 1178.771148] dump_stack+0x107/0x167 [ 1178.771937] should_fail.cold+0x5/0xa [ 1178.772752] ? create_object.isra.0+0x3a/0xa30 [ 1178.773716] should_failslab+0x5/0x20 [ 1178.774526] kmem_cache_alloc+0x5b/0x310 [ 1178.775408] ? mark_held_locks+0x9e/0xe0 [ 1178.776298] create_object.isra.0+0x3a/0xa30 [ 1178.777236] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1178.778328] kmem_cache_alloc_bulk+0x168/0x320 [ 1178.779332] io_submit_sqes+0x6fe4/0x8610 [ 1178.780264] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1178.781326] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1178.782365] ? find_held_lock+0x2c/0x110 [ 1178.783248] ? io_submit_sqes+0x8610/0x8610 [ 1178.784186] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1178.785226] ? wait_for_completion_io+0x270/0x270 [ 1178.786277] ? rcu_read_lock_any_held+0x75/0xa0 [ 1178.787284] ? vfs_write+0x354/0xb10 [ 1178.788091] ? fput_many+0x2f/0x1a0 [ 1178.788872] ? ksys_write+0x1a9/0x260 [ 1178.789688] ? __ia32_sys_read+0xb0/0xb0 [ 1178.790565] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1178.791696] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1178.792806] do_syscall_64+0x33/0x40 [ 1178.793597] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1178.794685] RIP: 0033:0x7f336a295b19 [ 1178.795500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1178.799395] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1178.801026] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1178.802544] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1178.804074] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.805595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1178.807110] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 05:46:08 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:46:08 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1178.851623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.852860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.854017] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 05:46:08 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000", 0x4, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1178.919926] loop4: detected capacity change from 0 to 2097152 05:46:08 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1178.937048] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1178.939161] EXT4-fs (loop4): group descriptors corrupted! 05:46:08 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 56) 05:46:08 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:46:08 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x37fff, 0x8001) 05:46:08 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)={[{@size={'size', 0x3d, [0x25]}}]}) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003a0011cd00fe0000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b592fb4c37f96abe986b6418dca6f9e49600bb120bfd62f869dbb9318089a820a94156dd76ed5c7272a80bffbb9b32a8d4bb6d30ed81fd0807e2513ae7700fa9b108f7160867a709a07ad1133ff60efaa7edd022"], 0x14}}, 0x4000000) r2 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5e, 0x2000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000180), 0x9}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r7 = syz_mount_image$nfs(&(0x7f00000001c0), &(0x7f0000000340)='./file1\x00', 0x7, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000380)="a587a3488c0b5fa9b6df83d2c53e55cd0d73a3b875a4860f52b62ed8cd01a624902d9ae3b67e180899848ddd2df1e6f1f1c3eae331723ce0fc46c9d6a40323fde46e194a954c27b406a3b5d0f7c1dbe7f50fae84b0e7086a4b9c5e648f3af8d7b1967b1ce375ba3afc", 0x69, 0x5}, {&(0x7f0000000400)="ac52b32b14a5695e1c10cb72664400945707efaec0a4f839979fa20f4d4f52ab7c23a3a700e50154bef5c75ea321bfb46761f317bf426f3c464890fa1e7815afcc3b92e588e71e516364ca12af2d5bca3931972ac07c8cd1f6662d2bebff50ae29b68797f30b8e138865e13d502aa1c50c47469092edf9bb00debd51d667b431cae708f40b6bcb9d132550bc23febeb4babdd92f4e85a80a18bbc160ea3190cf6bb6b18b8c48f32563046e82cccb56e88db23174879b4b7a626cce22f26d73221546c9ea4e49f390934b8d19f5574b8da8d5b4e07977d49e3a4e45dc4501e790e4b0ae8d98", 0xe5, 0x1}, {&(0x7f0000000500)="36fef9498ac9016c8076279427c85e46c925b2f0eaca0e8c40444546e95fa6f130a577dfe4a91a20de0639a8c1274d65550eafa1385dff217f2a4315e25ba2dea7912b75cd25f5a97eaf5e11a1aa654a90e51f7f8fba544f1b3cc91b9d783b29753f7beafe034a13930aa512c787991ac585d1764e46ad98478dfd15537adc2e781c7ba4aab2453ce73fdf23e402efe15012637fbfe1aac1bce1c10b6da25a79511403b55ab132291f", 0xa9, 0x7ff}], 0x888, &(0x7f0000000640)={[{'tmpfs\x00'}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@appraise_type}, {@hash}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f0000000700)={{}, 0x7, &(0x7f00000006c0)=[0x2, 0xf000000000000000, 0x3, 0x100, 0x3f, 0x1, 0x2], 0x1ff, 0x0, [0x281, 0x5, 0x1]}) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r8, 0x0, &(0x7f0000000100)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x2000, @fd_index=0x8, 0xffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0x4, 0x0, {0x0, r3}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r3}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r3}}, 0x6) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r3}}, 0x5) [ 1179.020566] loop5: detected capacity change from 0 to 3584 [ 1179.021819] nfs: Unknown parameter 'tmpfs' [ 1179.026854] FAULT_INJECTION: forcing a failure. [ 1179.026854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.029360] CPU: 1 PID: 10396 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1179.030808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1179.032575] Call Trace: [ 1179.033141] dump_stack+0x107/0x167 [ 1179.033914] should_fail.cold+0x5/0xa [ 1179.034725] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1179.035879] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1179.036969] ? simple_write_begin+0x109/0x2e0 [ 1179.037945] generic_perform_write+0x279/0x4f0 [ 1179.038909] ? __mnt_drop_write_file+0x9/0x70 [ 1179.039878] ? page_cache_prev_miss+0x310/0x310 [ 1179.040874] ? evict_inodes+0x470/0x470 [ 1179.041714] ? generic_write_checks+0x2ad/0x390 [ 1179.042711] __generic_file_write_iter+0x39d/0x5d0 [ 1179.043774] generic_file_write_iter+0xdb/0x230 [ 1179.044752] ? iov_iter_init+0x3c/0x130 [ 1179.045595] new_sync_write+0x42c/0x660 [ 1179.046441] ? new_sync_read+0x6f0/0x6f0 [ 1179.047332] ? __x64_sys_pwrite64+0x201/0x260 [ 1179.048284] ? lock_release+0x680/0x680 [ 1179.049132] ? avc_policy_seqno+0x9/0x70 [ 1179.049995] ? selinux_file_permission+0x92/0x520 [ 1179.051022] ? security_file_permission+0xb1/0xe0 [ 1179.052063] vfs_write+0x7c0/0xb10 [ 1179.052820] __x64_sys_pwrite64+0x201/0x260 [ 1179.053730] ? ksys_pwrite64+0x1b0/0x1b0 [ 1179.054594] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1179.055713] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1179.056809] do_syscall_64+0x33/0x40 [ 1179.057610] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1179.058692] RIP: 0033:0x7f3eb14f5b19 [ 1179.059486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1179.063373] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1179.064990] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1179.066486] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1179.068008] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1179.069512] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1179.071017] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1179.096990] loop5: detected capacity change from 0 to 3584 [ 1179.099088] nfs: Unknown parameter 'tmpfs' 05:46:24 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) [ 1194.953312] FAULT_INJECTION: forcing a failure. [ 1194.953312] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.954911] CPU: 0 PID: 10415 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1194.955875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1194.957020] Call Trace: [ 1194.957392] dump_stack+0x107/0x167 [ 1194.957896] should_fail.cold+0x5/0xa [ 1194.958430] ? create_object.isra.0+0x3a/0xa30 [ 1194.959058] should_failslab+0x5/0x20 [ 1194.959594] kmem_cache_alloc+0x5b/0x310 [ 1194.960156] ? mark_held_locks+0x9e/0xe0 [ 1194.960723] create_object.isra.0+0x3a/0xa30 [ 1194.961336] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1194.962041] kmem_cache_alloc_bulk+0x168/0x320 [ 1194.962681] io_submit_sqes+0x6fe4/0x8610 [ 1194.963275] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1194.963985] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1194.964657] ? find_held_lock+0x2c/0x110 [ 1194.965220] ? io_submit_sqes+0x8610/0x8610 [ 1194.965836] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1194.966502] ? wait_for_completion_io+0x270/0x270 [ 1194.967182] ? rcu_read_lock_any_held+0x75/0xa0 [ 1194.967829] ? vfs_write+0x354/0xb10 [ 1194.968346] ? fput_many+0x2f/0x1a0 [ 1194.968850] ? ksys_write+0x1a9/0x260 [ 1194.969371] ? __ia32_sys_read+0xb0/0xb0 [ 1194.969935] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1194.970656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1194.971379] do_syscall_64+0x33/0x40 [ 1194.971889] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1194.972589] RIP: 0033:0x7f336a295b19 [ 1194.973102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1194.975636] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1194.976686] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1194.977672] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1194.978664] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1194.979650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.980645] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 05:46:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 57) 05:46:24 executing program 5: r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x1, {0x0, r3}}, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r4, 0x6954, 0xba1f, 0x1, &(0x7f0000000040)={[0x800]}, 0x8) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000080)) io_uring_enter(r0, 0x10058ab, 0x0, 0x0, 0x0, 0x0) 05:46:24 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:46:24 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:46:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000", 0x4, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:46:24 executing program 3: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) r1 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000004c0)={0x0, @aes256, 0x0, @desc1}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000300)=""/239, 0xef}, {&(0x7f0000000180)=""/123, 0x7b}, {&(0x7f0000000580)=""/199, 0xc7}], 0x4, 0x1ff, 0xdd) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x2) copy_file_range(r0, 0x0, r2, 0x0, 0x200f5f4, 0x0) ioctl$CDROM_GET_CAPABILITY(0xffffffffffffffff, 0x5331) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x2) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x43c003, 0x106) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x301100, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply}}}}, 0x0) fcntl$setstatus(r3, 0x4, 0x400) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) 05:46:24 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x38fff, 0x8001) [ 1195.005170] FAULT_INJECTION: forcing a failure. [ 1195.005170] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1195.006818] CPU: 0 PID: 10416 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1195.007777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1195.008913] Call Trace: [ 1195.009289] dump_stack+0x107/0x167 [ 1195.009788] should_fail.cold+0x5/0xa [ 1195.010330] __alloc_pages_nodemask+0x182/0x600 [ 1195.010974] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1195.011818] ? find_get_entry+0x2c8/0x740 [ 1195.012393] ? exc_page_fault+0xca/0x1a0 [ 1195.012948] ? trace_hardirqs_on+0x5b/0x180 [ 1195.013540] alloc_pages_current+0x187/0x280 [ 1195.014142] __page_cache_alloc+0x2d2/0x360 [ 1195.014738] pagecache_get_page+0x2c7/0xc80 [ 1195.015328] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1195.016029] grab_cache_page_write_begin+0x64/0xa0 [ 1195.016707] simple_write_begin+0x30/0x2e0 [ 1195.017305] generic_perform_write+0x20a/0x4f0 [ 1195.017937] ? __mnt_drop_write_file+0x9/0x70 [ 1195.018550] ? page_cache_prev_miss+0x310/0x310 [ 1195.019183] ? evict_inodes+0x470/0x470 [ 1195.019731] ? generic_write_checks+0x2ad/0x390 [ 1195.020369] __generic_file_write_iter+0x39d/0x5d0 [ 1195.021037] generic_file_write_iter+0xdb/0x230 [ 1195.021665] ? iov_iter_init+0x3c/0x130 [ 1195.022213] new_sync_write+0x42c/0x660 [ 1195.022748] ? new_sync_read+0x6f0/0x6f0 [ 1195.023310] ? __x64_sys_pwrite64+0x201/0x260 [ 1195.023931] ? lock_release+0x680/0x680 [ 1195.024475] ? avc_policy_seqno+0x9/0x70 [ 1195.025022] ? selinux_file_permission+0x92/0x520 [ 1195.025699] ? security_file_permission+0xb1/0xe0 [ 1195.026365] vfs_write+0x7c0/0xb10 [ 1195.026845] __x64_sys_pwrite64+0x201/0x260 [ 1195.027448] ? ksys_pwrite64+0x1b0/0x1b0 [ 1195.028003] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1195.028719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1195.029417] do_syscall_64+0x33/0x40 [ 1195.029927] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1195.030620] RIP: 0033:0x7f3eb14f5b19 [ 1195.031128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1195.033640] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1195.034684] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1195.035666] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1195.036641] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1195.037604] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1195.038573] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:46:24 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1195.049020] loop4: detected capacity change from 0 to 2097152 [ 1195.092271] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1195.094345] EXT4-fs (loop4): group descriptors corrupted! 05:46:24 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 05:46:24 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 1195.138396] FAULT_INJECTION: forcing a failure. [ 1195.138396] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.139923] CPU: 0 PID: 10440 Comm: syz-executor.0 Not tainted 5.10.253 #1 [ 1195.140817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1195.141872] Call Trace: [ 1195.142215] dump_stack+0x107/0x167 [ 1195.142693] should_fail.cold+0x5/0xa [ 1195.143198] should_failslab+0x5/0x20 [ 1195.143714] kmem_cache_alloc_bulk+0x4b/0x320 [ 1195.144301] io_submit_sqes+0x6fe4/0x8610 [ 1195.144856] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1195.145504] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1195.146126] ? find_held_lock+0x2c/0x110 [ 1195.146654] ? io_submit_sqes+0x8610/0x8610 [ 1195.147324] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1195.148055] ? wait_for_completion_io+0x270/0x270 [ 1195.148678] ? rcu_read_lock_any_held+0x75/0xa0 [ 1195.149275] ? vfs_write+0x354/0xb10 [ 1195.149758] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1195.150346] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1195.151035] ? ksys_write+0x1a9/0x260 [ 1195.151527] ? __ia32_sys_read+0xb0/0xb0 [ 1195.152047] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1195.152713] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1195.153374] do_syscall_64+0x33/0x40 [ 1195.153515] FAULT_INJECTION: forcing a failure. [ 1195.153515] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.153849] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1195.153865] RIP: 0033:0x7f87bbbf4b19 [ 1195.157367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1195.159705] RSP: 002b:00007f87b916a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1195.160668] RAX: ffffffffffffffda RBX: 00007f87bbd07f60 RCX: 00007f87bbbf4b19 [ 1195.161581] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1195.162501] RBP: 00007f87b916a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1195.163420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.164357] R13: 00007ffeb1e6d13f R14: 00007f87b916a300 R15: 0000000000022000 [ 1195.165304] CPU: 1 PID: 10438 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1195.166827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1195.168635] Call Trace: [ 1195.169211] dump_stack+0x107/0x167 [ 1195.170002] should_fail.cold+0x5/0xa [ 1195.170830] ? create_object.isra.0+0x3a/0xa30 [ 1195.171883] should_failslab+0x5/0x20 [ 1195.172709] kmem_cache_alloc+0x5b/0x310 [ 1195.173590] ? mark_held_locks+0x9e/0xe0 [ 1195.174476] create_object.isra.0+0x3a/0xa30 [ 1195.175445] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1195.176555] kmem_cache_alloc_bulk+0x168/0x320 [ 1195.177549] io_submit_sqes+0x6fe4/0x8610 [ 1195.178478] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1195.179567] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1195.180618] ? find_held_lock+0x2c/0x110 [ 1195.181506] ? io_submit_sqes+0x8610/0x8610 [ 1195.182452] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1195.183505] ? wait_for_completion_io+0x270/0x270 [ 1195.184548] ? rcu_read_lock_any_held+0x75/0xa0 [ 1195.185547] ? vfs_write+0x354/0xb10 [ 1195.186349] ? fput_many+0x2f/0x1a0 [ 1195.187128] ? ksys_write+0x1a9/0x260 [ 1195.187947] ? __ia32_sys_read+0xb0/0xb0 [ 1195.188829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1195.189954] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1195.191072] do_syscall_64+0x33/0x40 [ 1195.191887] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1195.192989] RIP: 0033:0x7f336a295b19 [ 1195.193789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1195.197747] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1195.199390] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1195.200919] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1195.202437] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1195.203964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.205487] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 05:46:24 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:46:24 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x39fff, 0x8001) 05:46:24 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 58) [ 1195.260501] FAULT_INJECTION: forcing a failure. [ 1195.260501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1195.262039] CPU: 0 PID: 10443 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1195.262871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1195.263893] Call Trace: [ 1195.264219] dump_stack+0x107/0x167 [ 1195.264662] should_fail.cold+0x5/0xa [ 1195.265135] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1195.265780] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1195.266396] ? simple_write_begin+0x109/0x2e0 [ 1195.266938] generic_perform_write+0x279/0x4f0 [ 1195.267503] ? __mnt_drop_write_file+0x9/0x70 [ 1195.268042] ? page_cache_prev_miss+0x310/0x310 [ 1195.268602] ? evict_inodes+0x470/0x470 [ 1195.269083] ? generic_write_checks+0x2ad/0x390 [ 1195.269647] __generic_file_write_iter+0x39d/0x5d0 [ 1195.270240] generic_file_write_iter+0xdb/0x230 [ 1195.270796] ? iov_iter_init+0x3c/0x130 [ 1195.271278] new_sync_write+0x42c/0x660 [ 1195.271770] ? new_sync_read+0x6f0/0x6f0 [ 1195.272261] ? __x64_sys_pwrite64+0x201/0x260 [ 1195.272804] ? lock_release+0x680/0x680 [ 1195.273284] ? avc_policy_seqno+0x9/0x70 [ 1195.273774] ? selinux_file_permission+0x92/0x520 [ 1195.274359] ? security_file_permission+0xb1/0xe0 [ 1195.274946] vfs_write+0x7c0/0xb10 [ 1195.275384] __x64_sys_pwrite64+0x201/0x260 [ 1195.275899] ? ksys_pwrite64+0x1b0/0x1b0 [ 1195.276387] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1195.277014] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1195.277635] do_syscall_64+0x33/0x40 [ 1195.278084] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1195.278696] RIP: 0033:0x7f3eb14f5b19 [ 1195.279141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1195.281349] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1195.282261] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1195.283113] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1195.283972] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1195.284826] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1195.285679] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:46:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="020000000100", 0x6, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:46:24 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 05:46:24 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1195.333488] loop4: detected capacity change from 0 to 2097152 [ 1195.343687] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1195.345986] EXT4-fs (loop4): group descriptors corrupted! [ 1195.405305] FAULT_INJECTION: forcing a failure. [ 1195.405305] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.407877] CPU: 0 PID: 10457 Comm: syz-executor.0 Not tainted 5.10.253 #1 [ 1195.409455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1195.411251] Call Trace: [ 1195.411842] dump_stack+0x107/0x167 [ 1195.412639] should_fail.cold+0x5/0xa [ 1195.413464] ? create_object.isra.0+0x3a/0xa30 [ 1195.414454] should_failslab+0x5/0x20 [ 1195.415284] kmem_cache_alloc+0x5b/0x310 [ 1195.416186] create_object.isra.0+0x3a/0xa30 [ 1195.417129] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1195.418222] kmem_cache_alloc_bulk+0x168/0x320 [ 1195.419212] io_submit_sqes+0x6fe4/0x8610 [ 1195.420151] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1195.421224] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1195.422268] ? find_held_lock+0x2c/0x110 [ 1195.423154] ? io_submit_sqes+0x8610/0x8610 [ 1195.424132] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1195.425192] ? wait_for_completion_io+0x270/0x270 [ 1195.426250] ? rcu_read_lock_any_held+0x75/0xa0 [ 1195.427273] ? vfs_write+0x354/0xb10 [ 1195.428147] ? fput_many+0x2f/0x1a0 [ 1195.428949] ? ksys_write+0x1a9/0x260 [ 1195.429781] ? __ia32_sys_read+0xb0/0xb0 [ 1195.430683] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1195.431855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1195.433018] do_syscall_64+0x33/0x40 [ 1195.433836] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1195.434980] RIP: 0033:0x7f87bbbf4b19 [ 1195.435795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1195.439756] RSP: 002b:00007f87b916a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1195.441389] RAX: ffffffffffffffda RBX: 00007f87bbd07f60 RCX: 00007f87bbbf4b19 [ 1195.442921] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1195.444469] RBP: 00007f87b916a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1195.446014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.447561] R13: 00007ffeb1e6d13f R14: 00007f87b916a300 R15: 0000000000022000 05:46:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 59) 05:46:40 executing program 3: openat2$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/cgroup.procs\x00', &(0x7f0000000540)={0x20080, 0x0, 0x8}, 0x3c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './cgroup/cgroup.procs\x00'}) statx(r0, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x1000, 0x200, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r4, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) dup(r1) r5 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="b2", 0x20000141, 0x8001) openat(r5, &(0x7f0000000080)='./file0\x00', 0x20a35212e039a541, 0x0) 05:46:40 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 05:46:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000", 0x4, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:46:40 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x3afff, 0x8001) [ 1211.060812] loop4: detected capacity change from 0 to 2097152 [ 1211.065991] FAULT_INJECTION: forcing a failure. [ 1211.065991] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.067441] CPU: 1 PID: 10475 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1211.068275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1211.069267] Call Trace: [ 1211.069586] dump_stack+0x107/0x167 [ 1211.070021] should_fail.cold+0x5/0xa [ 1211.070439] ? create_object.isra.0+0x3a/0xa30 [ 1211.070989] should_failslab+0x5/0x20 [ 1211.071406] kmem_cache_alloc+0x5b/0x310 [ 1211.071905] ? mark_held_locks+0x9e/0xe0 [ 1211.072393] create_object.isra.0+0x3a/0xa30 [ 1211.072878] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1211.073496] kmem_cache_alloc_bulk+0x168/0x320 [ 1211.074051] io_submit_sqes+0x6fe4/0x8610 [ 1211.074568] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1211.075156] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1211.075698] ? find_held_lock+0x2c/0x110 [ 1211.076188] ? io_submit_sqes+0x8610/0x8610 [ 1211.076660] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1211.077237] ? wait_for_completion_io+0x270/0x270 [ 1211.077820] ? rcu_read_lock_any_held+0x75/0xa0 [ 1211.078376] ? vfs_write+0x354/0xb10 [ 1211.078787] ? fput_many+0x2f/0x1a0 [ 1211.079220] ? ksys_write+0x1a9/0x260 [ 1211.079641] ? __ia32_sys_read+0xb0/0xb0 [ 1211.080129] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1211.080766] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1211.081330] do_syscall_64+0x33/0x40 [ 1211.081778] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1211.082334] RIP: 0033:0x7f336a295b19 [ 1211.082783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1211.084778] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1211.085694] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1211.086550] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1211.087407] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1211.088276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.089131] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 [ 1211.095681] FAULT_INJECTION: forcing a failure. [ 1211.095681] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.097072] CPU: 1 PID: 10473 Comm: syz-executor.0 Not tainted 5.10.253 #1 [ 1211.097905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1211.098799] Call Trace: [ 1211.099118] dump_stack+0x107/0x167 [ 1211.099556] should_fail.cold+0x5/0xa [ 1211.100017] ? create_object.isra.0+0x3a/0xa30 [ 1211.100521] should_failslab+0x5/0x20 [ 1211.100980] kmem_cache_alloc+0x5b/0x310 [ 1211.101469] ? mark_held_locks+0x9e/0xe0 [ 1211.101959] create_object.isra.0+0x3a/0xa30 [ 1211.102478] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1211.103091] kmem_cache_alloc_bulk+0x168/0x320 [ 1211.103655] io_submit_sqes+0x6fe4/0x8610 [ 1211.104178] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1211.104777] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1211.105355] ? find_held_lock+0x2c/0x110 [ 1211.105409] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1211.105851] ? io_submit_sqes+0x8610/0x8610 [ 1211.107898] EXT4-fs (loop4): group descriptors corrupted! [ 1211.108358] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1211.108375] ? wait_for_completion_io+0x270/0x270 [ 1211.108389] ? rcu_read_lock_any_held+0x75/0xa0 [ 1211.108397] ? vfs_write+0x354/0xb10 [ 1211.108414] ? fput_many+0x2f/0x1a0 [ 1211.112155] ? ksys_write+0x1a9/0x260 [ 1211.112606] ? __ia32_sys_read+0xb0/0xb0 [ 1211.113095] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1211.113726] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1211.114341] do_syscall_64+0x33/0x40 [ 1211.114790] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1211.115405] RIP: 0033:0x7f87bbbf4b19 [ 1211.115855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1211.118071] RSP: 002b:00007f87b916a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1211.118983] RAX: ffffffffffffffda RBX: 00007f87bbd07f60 RCX: 00007f87bbbf4b19 [ 1211.119844] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1211.120698] RBP: 00007f87b916a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1211.121554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1211.122407] R13: 00007ffeb1e6d13f R14: 00007f87b916a300 R15: 0000000000022000 [ 1211.126715] FAULT_INJECTION: forcing a failure. [ 1211.126715] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1211.128159] CPU: 1 PID: 10464 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1211.129005] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1211.130001] Call Trace: [ 1211.130322] dump_stack+0x107/0x167 [ 1211.130759] should_fail.cold+0x5/0xa [ 1211.131222] __alloc_pages_nodemask+0x182/0x600 [ 1211.131799] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1211.132526] ? find_get_entry+0x2c8/0x740 [ 1211.133027] ? exc_page_fault+0xca/0x1a0 [ 1211.133516] ? trace_hardirqs_on+0x5b/0x180 [ 1211.134233] alloc_pages_current+0x187/0x280 05:46:40 executing program 6: r0 = syz_io_uring_setup(0x1c29, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:46:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000050000000c00018008000100", @ANYRES32=r3, @ANYBLOB="14000380100003800ceec21001800800010069000000c66c40f09635f3a6ed916ac44247e6baa7856ce4d4168cacb5fc"], 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) poll(&(0x7f00000004c0)=[{r2}, {r1, 0x4020}, {r0, 0x4492}, {0xffffffffffffffff, 0x40}], 0x4, 0x7) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)={0x54, r8, 0x300, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x54}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x44, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x8080) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYRESDEC=r9, @ANYRESOCT, @ANYBLOB="00042cbd7000fedbdf250c00000038000380300003802c0001800c00020073797a5f74756e00040003000800010007000000080001000300000008000100000000f8040001002000018008000300030000001400020073797a6b616c6c657230000000000000180001801400020069703667726530000000000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x4048890}, 0x24004052) syz_usb_connect$cdc_ncm(0x5, 0x88, &(0x7f0000000f80)=ANY=[@ANYBLOB="12011003020000102505a1a44000010203010902760002010510810904000001020d00002525060001052400c9000d240f011f000000020051000506241a02000105240100081524120400a317a88b045e4f01a607c0ffcb7e392a090581031000803f010904010000020d00000903f40102020d0003015d06d5c57ed1a8052bedd37d3681a610a6fbe8d301ab39d38c7663df93ccc851687ac9cadc3f7f4ee21ba100000000000000deff000000000000dbe9991816bf27552b20a65efa345f29"], &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x44, 0x1, 0x3, 0xff, 0x4}, 0x47, &(0x7f0000000500)=ANY=[@ANYBLOB="050f4700061410d78ad2be17c804047c091b6126a6bc1ffa138c09d157d20e03100b1410040052867d5f75988055a9f157d431bba93f03100b0a100300020081ff91d80a1003000c0080810010", @ANYRESOCT=r3], 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x500e}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x412}}, {0x6e, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]}, {0x0, 0xfffffffffffffffd}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2009}}]}) bind$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x9, r9, 0x1, 0x7, 0x6, @local}, 0x14) syz_usb_connect$cdc_ecm(0x1, 0x8b, &(0x7f0000000d80)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x1, 0x1, 0x4, 0x0, 0x1f, [{{0x9, 0x4, 0x0, 0x3f, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x11}, {0xd, 0x24, 0xf, 0x1, 0x6eb8, 0x1003, 0x7f, 0xfe}, [@country_functional={0x6, 0x24, 0x7, 0x43, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x8}, @mdlm_detail={0x24, 0x24, 0x13, 0x6, "0252509dcf00d5087f54ec7a169dfecf525cb5ecaf88aaf4d8a13b93e3d1f70f"}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x20, 0xca}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xff, 0x3f, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x4, 0x40}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x0, 0x7f, 0x30, 0xff, 0x20}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="050f050000f567ef6a1438ced177d17f0261e77b115210430a2c9d5b89eb23d1087f20d40f65835fdf60c7352d89f7d6ca513fdba36789af2d39d944205bb503a130dfa2a3556799c873693e371e15272d6c43badc2d76fd61c9e59ead05275c191ec933"], 0x1, [{0x6e, &(0x7f0000000580)=@string={0x6e, 0x3, "187f10a8d24bdbc3047d9d46f9a257a9123e6995a6ccdbd0bb87886566cee36babc71b2b55b3d10ae534826e7fc3b8aff0598480890d7f39b54bf9ef7f407a519eb57b308eb2f3de8fcaf674e9d1067fbaee4290e0d74be566e44711feaacb5861e32e96d0d328da31964bbf"}}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000004c0)=ANY=[]) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) 05:46:40 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 1211.134789] __page_cache_alloc+0x2d2/0x360 [ 1211.135450] pagecache_get_page+0x2c7/0xc80 [ 1211.135971] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1211.136581] grab_cache_page_write_begin+0x64/0xa0 [ 1211.137169] simple_write_begin+0x30/0x2e0 [ 1211.137677] generic_perform_write+0x20a/0x4f0 [ 1211.138218] ? __mnt_drop_write_file+0x9/0x70 [ 1211.138739] ? page_cache_prev_miss+0x310/0x310 [ 1211.139298] ? evict_inodes+0x470/0x470 [ 1211.139771] ? generic_write_checks+0x2ad/0x390 [ 1211.140310] __generic_file_write_iter+0x39d/0x5d0 [ 1211.140886] generic_file_write_iter+0xdb/0x230 [ 1211.141436] ? iov_iter_init+0x3c/0x130 [ 1211.141903] new_sync_write+0x42c/0x660 [ 1211.142386] ? new_sync_read+0x6f0/0x6f0 [ 1211.142853] ? __x64_sys_pwrite64+0x201/0x260 [ 1211.143391] ? lock_release+0x680/0x680 [ 1211.143877] ? avc_policy_seqno+0x9/0x70 [ 1211.144351] ? selinux_file_permission+0x92/0x520 [ 1211.144943] ? security_file_permission+0xb1/0xe0 [ 1211.145521] vfs_write+0x7c0/0xb10 [ 1211.145947] __x64_sys_pwrite64+0x201/0x260 [ 1211.146463] ? ksys_pwrite64+0x1b0/0x1b0 [ 1211.146931] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1211.147552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1211.148155] do_syscall_64+0x33/0x40 [ 1211.148604] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1211.149219] RIP: 0033:0x7f3eb14f5b19 [ 1211.149654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1211.151852] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1211.152728] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1211.153561] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1211.154382] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1211.155214] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1211.156041] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1211.231817] udc-core: couldn't find an available UDC or it's busy [ 1211.233389] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1211.251767] udc-core: couldn't find an available UDC or it's busy [ 1211.252580] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1211.268897] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1211.782606] udc-core: couldn't find an available UDC or it's busy [ 1211.783718] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1211.785037] udc-core: couldn't find an available UDC or it's busy [ 1211.786073] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 1211.806336] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 05:46:54 executing program 6: r0 = syz_io_uring_setup(0x1c29, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:46:54 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 05:46:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x0, 0x1, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_ZONE={0x6}, @CTA_LABELS_MASK={0x14, 0x17, [0xfffffffa, 0xfff, 0x0, 0x7]}]}, 0x30}}, 0x4000800) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x80000000}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x4004001) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88000) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000240)={0x1, 0x1, 0x4, 0xffffffff, 0x2, [{0x100, 0xfffffffffffffbff, 0x6, '\x00', 0x1208}, {0x9, 0x0, 0x40, '\x00', 0xb}]}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r5, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) close(r1) 05:46:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x3bfff, 0x8001) 05:46:54 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 05:46:54 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 60) 05:46:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000", 0x4, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:46:54 executing program 3: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xdf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x14}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x8) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000001600)={{'\x00', 0x3}, {}, 0x83, 0x0, 0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)="3668aa2f85f49a2919feff81c2652942c221bbf9b18ec9b23f260b27654ad1f40a12bad0c42c42ec4acaf238e00663e49bbd1701109941354d49a873bc3a9d0b73e839e29cfde22e8f5fa6980a5afc134c57fdf93808d0582357171f873ab00596dd3b1d47a19cb490ae9ef4756f40570e6a938bc126a81937ee747894b132df9f06c7ed577ee953ace4312850e1c8360738c935e3bfe44262f6afa3a37ae5ae7e84785a159f88d4c985e0d3e60cf87836b4f7d4f15f883f416cae9e907525ee277748878da955cb7f8d3163183952b68472eb83880d", 0xd6, 0x0, &(0x7f0000001e00)=ANY=[], 0x10d6}) ptrace(0x10, r1) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) [ 1225.124929] FAULT_INJECTION: forcing a failure. [ 1225.124929] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.126579] CPU: 1 PID: 10500 Comm: syz-executor.0 Not tainted 5.10.253 #1 [ 1225.127644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1225.128675] Call Trace: [ 1225.129089] dump_stack+0x107/0x167 [ 1225.129649] should_fail.cold+0x5/0xa [ 1225.130240] ? create_object.isra.0+0x3a/0xa30 [ 1225.130939] should_failslab+0x5/0x20 [ 1225.131523] kmem_cache_alloc+0x5b/0x310 [ 1225.132156] ? mark_held_locks+0x9e/0xe0 [ 1225.132781] create_object.isra.0+0x3a/0xa30 [ 1225.133450] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1225.134229] kmem_cache_alloc_bulk+0x168/0x320 [ 1225.134934] io_submit_sqes+0x6fe4/0x8610 [ 1225.135586] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1225.136366] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1225.137098] ? find_held_lock+0x2c/0x110 [ 1225.137728] ? io_submit_sqes+0x8610/0x8610 [ 1225.138399] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1225.139137] ? wait_for_completion_io+0x270/0x270 [ 1225.139887] ? rcu_read_lock_any_held+0x75/0xa0 [ 1225.140594] ? vfs_write+0x354/0xb10 [ 1225.141167] ? fput_many+0x2f/0x1a0 [ 1225.141715] ? ksys_write+0x1a9/0x260 [ 1225.142296] ? __ia32_sys_read+0xb0/0xb0 [ 1225.142917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1225.143725] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1225.144518] do_syscall_64+0x33/0x40 [ 1225.145086] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1225.145647] loop4: detected capacity change from 0 to 2097152 [ 1225.145867] RIP: 0033:0x7f87bbbf4b19 [ 1225.145892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1225.150765] RSP: 002b:00007f87b916a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1225.151934] RAX: ffffffffffffffda RBX: 00007f87bbd07f60 RCX: 00007f87bbbf4b19 [ 1225.153019] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1225.154104] RBP: 00007f87b916a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1225.155175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.156265] R13: 00007ffeb1e6d13f R14: 00007f87b916a300 R15: 0000000000022000 [ 1225.163213] FAULT_INJECTION: forcing a failure. [ 1225.163213] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.165725] CPU: 0 PID: 10494 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1225.167202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1225.168972] Call Trace: [ 1225.169546] dump_stack+0x107/0x167 [ 1225.170329] should_fail.cold+0x5/0xa [ 1225.171152] ? create_object.isra.0+0x3a/0xa30 [ 1225.172118] should_failslab+0x5/0x20 [ 1225.172920] kmem_cache_alloc+0x5b/0x310 [ 1225.173777] ? mark_held_locks+0x9e/0xe0 [ 1225.174647] create_object.isra.0+0x3a/0xa30 [ 1225.175573] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1225.176659] kmem_cache_alloc_bulk+0x168/0x320 [ 1225.177630] io_submit_sqes+0x6fe4/0x8610 [ 1225.178539] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1225.179596] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1225.180623] ? find_held_lock+0x2c/0x110 [ 1225.181503] ? io_submit_sqes+0x8610/0x8610 [ 1225.182422] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1225.183438] ? wait_for_completion_io+0x270/0x270 [ 1225.184469] ? rcu_read_lock_any_held+0x75/0xa0 [ 1225.185448] ? vfs_write+0x354/0xb10 [ 1225.186231] ? fput_many+0x2f/0x1a0 [ 1225.186984] ? ksys_write+0x1a9/0x260 [ 1225.187789] ? __ia32_sys_read+0xb0/0xb0 [ 1225.188648] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1225.189742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1225.190826] do_syscall_64+0x33/0x40 [ 1225.191603] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1225.192257] FAULT_INJECTION: forcing a failure. [ 1225.192257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1225.192684] RIP: 0033:0x7f336a295b19 [ 1225.192711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1225.198748] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1225.200357] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1225.201846] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1225.203338] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1225.204837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.206333] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 [ 1225.207865] CPU: 1 PID: 10506 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1225.208732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1225.209675] Call Trace: [ 1225.210006] dump_stack+0x107/0x167 [ 1225.210461] should_fail.cold+0x5/0xa [ 1225.210941] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1225.211604] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1225.212196] ? simple_write_begin+0x109/0x2e0 [ 1225.212756] generic_perform_write+0x279/0x4f0 [ 1225.213289] ? __mnt_drop_write_file+0x9/0x70 [ 1225.213840] ? page_cache_prev_miss+0x310/0x310 [ 1225.214415] ? evict_inodes+0x470/0x470 [ 1225.214908] ? generic_write_checks+0x2ad/0x390 [ 1225.215444] __generic_file_write_iter+0x39d/0x5d0 [ 1225.216057] generic_file_write_iter+0xdb/0x230 [ 1225.216629] ? iov_iter_init+0x3c/0x130 [ 1225.217089] new_sync_write+0x42c/0x660 [ 1225.217582] ? new_sync_read+0x6f0/0x6f0 [ 1225.218046] ? __x64_sys_pwrite64+0x201/0x260 [ 1225.218604] ? lock_release+0x680/0x680 [ 1225.219072] ? avc_policy_seqno+0x9/0x70 [ 1225.219574] ? selinux_file_permission+0x92/0x520 [ 1225.220181] ? security_file_permission+0xb1/0xe0 [ 1225.220782] vfs_write+0x7c0/0xb10 [ 1225.221192] __x64_sys_pwrite64+0x201/0x260 [ 1225.221727] ? ksys_pwrite64+0x1b0/0x1b0 [ 1225.222233] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1225.222883] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1225.223525] do_syscall_64+0x33/0x40 [ 1225.223992] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1225.224616] RIP: 0033:0x7f3eb14f5b19 [ 1225.225038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1225.227104] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1225.227975] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1225.228782] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1225.229594] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1225.230395] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1225.231198] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1225.242059] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1225.243214] EXT4-fs (loop4): group descriptors corrupted! 05:46:54 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 05:46:54 executing program 6: r0 = syz_io_uring_setup(0x1c29, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:46:54 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) [ 1225.308892] FAULT_INJECTION: forcing a failure. [ 1225.308892] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.310353] CPU: 1 PID: 10515 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1225.311170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1225.312086] Call Trace: [ 1225.312403] dump_stack+0x107/0x167 [ 1225.312821] FAULT_INJECTION: forcing a failure. [ 1225.312821] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.314130] should_fail.cold+0x5/0xa [ 1225.314591] ? create_object.isra.0+0x3a/0xa30 [ 1225.315136] should_failslab+0x5/0x20 [ 1225.315559] kmem_cache_alloc+0x5b/0x310 [ 1225.316057] ? mark_held_locks+0x9e/0xe0 [ 1225.316509] create_object.isra.0+0x3a/0xa30 [ 1225.317029] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1225.317594] kmem_cache_alloc_bulk+0x168/0x320 [ 1225.318142] io_submit_sqes+0x6fe4/0x8610 [ 1225.318650] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1225.319242] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1225.319825] ? find_held_lock+0x2c/0x110 [ 1225.320310] ? io_submit_sqes+0x8610/0x8610 [ 1225.320830] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1225.321402] ? wait_for_completion_io+0x270/0x270 [ 1225.321971] ? rcu_read_lock_any_held+0x75/0xa0 [ 1225.322518] ? vfs_write+0x354/0xb10 [ 1225.322961] ? fput_many+0x2f/0x1a0 [ 1225.323391] ? ksys_write+0x1a9/0x260 [ 1225.323846] ? __ia32_sys_read+0xb0/0xb0 [ 1225.324324] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1225.324940] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1225.325554] do_syscall_64+0x33/0x40 [ 1225.325994] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1225.326601] RIP: 0033:0x7f336a295b19 [ 1225.327035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1225.329213] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1225.330109] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1225.330952] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1225.331798] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1225.332633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.333471] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 [ 1225.334337] CPU: 0 PID: 10517 Comm: syz-executor.0 Not tainted 5.10.253 #1 [ 1225.335847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1225.337576] Call Trace: [ 1225.338133] dump_stack+0x107/0x167 [ 1225.338896] should_fail.cold+0x5/0xa [ 1225.339706] ? create_object.isra.0+0x3a/0xa30 [ 1225.340661] should_failslab+0x5/0x20 [ 1225.341456] kmem_cache_alloc+0x5b/0x310 05:46:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000", 0x4, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1225.342305] ? mark_held_locks+0x9e/0xe0 [ 1225.343268] create_object.isra.0+0x3a/0xa30 [ 1225.344196] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1225.345264] kmem_cache_alloc_bulk+0x168/0x320 [ 1225.346229] io_submit_sqes+0x6fe4/0x8610 [ 1225.347129] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1225.348176] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1225.349191] ? find_held_lock+0x2c/0x110 [ 1225.350050] ? io_submit_sqes+0x8610/0x8610 [ 1225.350969] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1225.351996] ? wait_for_completion_io+0x270/0x270 [ 1225.353008] ? rcu_read_lock_any_held+0x75/0xa0 [ 1225.353978] ? vfs_write+0x354/0xb10 [ 1225.354760] ? fput_many+0x2f/0x1a0 [ 1225.355516] ? ksys_write+0x1a9/0x260 [ 1225.356318] ? __ia32_sys_read+0xb0/0xb0 [ 1225.357178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1225.358274] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1225.359359] do_syscall_64+0x33/0x40 [ 1225.360152] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1225.361221] RIP: 0033:0x7f87bbbf4b19 [ 1225.361999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1225.365837] RSP: 002b:00007f87b916a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1225.367429] RAX: ffffffffffffffda RBX: 00007f87bbd07f60 RCX: 00007f87bbbf4b19 [ 1225.368925] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1225.370415] RBP: 00007f87b916a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1225.371912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.373394] R13: 00007ffeb1e6d13f R14: 00007f87b916a300 R15: 0000000000022000 [ 1225.392466] loop4: detected capacity change from 0 to 2097152 05:46:54 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x3cfff, 0x8001) [ 1225.400958] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1225.402053] EXT4-fs (loop4): group descriptors corrupted! 05:46:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1225.474511] loop4: detected capacity change from 0 to 2097152 [ 1225.478826] FAULT_INJECTION: forcing a failure. [ 1225.478826] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.480330] CPU: 1 PID: 10531 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1225.481243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1225.482238] Call Trace: [ 1225.482564] dump_stack+0x107/0x167 [ 1225.483006] should_fail.cold+0x5/0xa [ 1225.483472] ? io_req_prep_async+0x170/0xb10 [ 1225.484018] should_failslab+0x5/0x20 [ 1225.484484] __kmalloc+0x72/0x390 [ 1225.484905] ? lock_downgrade+0x6d0/0x6d0 [ 1225.485406] io_req_prep_async+0x170/0xb10 [ 1225.485917] ? __fget_files+0x2f8/0x520 [ 1225.486397] ? io_recv+0xae0/0xae0 [ 1225.486831] ? io_prep_rw+0x7f5/0x1050 [ 1225.487309] io_submit_sqes+0x3bcb/0x8610 [ 1225.487835] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1225.488433] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1225.489021] ? find_held_lock+0x2c/0x110 [ 1225.489515] ? io_submit_sqes+0x8610/0x8610 [ 1225.490048] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1225.490630] ? wait_for_completion_io+0x270/0x270 [ 1225.491216] ? rcu_read_lock_any_held+0x75/0xa0 [ 1225.491784] ? vfs_write+0x354/0xb10 [ 1225.492235] ? fput_many+0x2f/0x1a0 [ 1225.492670] ? ksys_write+0x1a9/0x260 [ 1225.493133] ? __ia32_sys_read+0xb0/0xb0 [ 1225.493626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1225.494263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1225.494886] do_syscall_64+0x33/0x40 [ 1225.495334] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1225.495956] RIP: 0033:0x7f336a295b19 [ 1225.496406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1225.498601] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1225.499522] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1225.500385] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1225.501248] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1225.502105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1225.502956] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 [ 1225.512838] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1225.514092] EXT4-fs (loop4): group descriptors corrupted! 05:46:54 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 05:46:54 executing program 3: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) ftruncate(r0, 0x1000004) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xdc) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x6, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="000329bd7000fddbdf255300000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900080000001d000000"], 0x28}}, 0x800) read$hiddev(0xffffffffffffffff, &(0x7f0000000140)=""/104, 0x68) lseek(r1, 0x0, 0x2) copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0) ioctl$CDROM_GET_CAPABILITY(0xffffffffffffffff, 0x5331) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x2) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x43e003, 0x106) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x301100, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c24e000000aaaaaaaaaabb0800450000280000000000414eb22a9a5c0f2d029078ac1e0001ffffffff0e00907800000000000000000000b510e4557b9c0644c6a4974e9d8c3d31abf340633304e6839397b6cd8ed6e1798029961d2686b40c9600c71023571f4f863db38b7130d42553e4362107bcd352444a8561f499e5332024de36b6266d2772c807f7e0f39efb5847367bcc4c268b9988c511b214964d4aaf7072da711495ff923217f9e386b27a162c89b1bfe97769c76c400165c6548127b31c3192ecb23e0ebb028b5aa6edd912a5a51e0ae364952caaaae8feeadb252a48b89a426243eec17c73bb4a289d51e7733c7eaa5f8a9351060f37387afb55550e97f663e5261b34e16b858f92675a27c3f3c194f825b5e6de4003a8013ae387b139f51bc705000000532019c90869db35c05ee95cf874900df338c5d0e4974adbb632118a3d21e34381f23977e24cb236a3a0186b91196aa986f7eaefdc176ded503b1aa02aeec25bd50a232efbd38d3b06522f6e06e8841dcdb61a983514e9bcba0000000000"], 0x0) fcntl$setstatus(r2, 0x4, 0x400) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0x84080, 0x118) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200040, 0x0) sendfile(r3, r4, 0x0, 0x100000001) 05:46:54 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:46:54 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fsync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r4, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x140) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="230000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r6 = accept4(r0, 0x0, &(0x7f00000000c0), 0x800) sendfile(r5, r6, &(0x7f0000000140), 0x5) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 05:46:54 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:46:54 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 05:46:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2, r2}) [ 1225.638895] FAULT_INJECTION: forcing a failure. [ 1225.638895] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.641517] CPU: 0 PID: 10544 Comm: syz-executor.0 Not tainted 5.10.253 #1 [ 1225.642974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1225.644718] Call Trace: [ 1225.645278] dump_stack+0x107/0x167 [ 1225.646047] should_fail.cold+0x5/0xa [ 1225.646856] ? create_object.isra.0+0x3a/0xa30 [ 1225.647830] should_failslab+0x5/0x20 [ 1225.648632] kmem_cache_alloc+0x5b/0x310 [ 1225.649493] ? mark_held_locks+0x9e/0xe0 [ 1225.650394] create_object.isra.0+0x3a/0xa30 [ 1225.651337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1225.652418] kmem_cache_alloc_bulk+0x168/0x320 [ 1225.653383] io_submit_sqes+0x6fe4/0x8610 [ 1225.654291] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1225.655334] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1225.656354] ? find_held_lock+0x2c/0x110 [ 1225.657217] ? io_submit_sqes+0x8610/0x8610 [ 1225.658129] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1225.659139] ? wait_for_completion_io+0x270/0x270 [ 1225.660161] ? rcu_read_lock_any_held+0x75/0xa0 [ 1225.661133] ? vfs_write+0x354/0xb10 [ 1225.661914] ? fput_many+0x2f/0x1a0 [ 1225.662675] ? ksys_write+0x1a9/0x260 [ 1225.663468] ? __ia32_sys_read+0xb0/0xb0 [ 1225.664333] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1225.665431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1225.666521] do_syscall_64+0x33/0x40 [ 1225.667304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1225.668385] RIP: 0033:0x7f87bbbf4b19 [ 1225.669167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1225.673010] RSP: 002b:00007f87b916a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1225.674611] RAX: ffffffffffffffda RBX: 00007f87bbd07f60 RCX: 00007f87bbbf4b19 [ 1225.676111] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1225.677610] RBP: 00007f87b916a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1225.679104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.680606] R13: 00007ffeb1e6d13f R14: 00007f87b916a300 R15: 0000000000022000 05:47:10 executing program 5: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38373635383433343000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000a4d0099b099d46eeb5a6d2ef5e9d5ded010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000004700000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000e0f4655fe1f4655fe1f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2080}, {&(0x7f0000011600)="8081000000601020e0f4655fe0f4655fe0f4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x2300}, {&(0x7f0000011700)="c041000000400000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2500}, {&(0x7f0000011800)="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"/768, 0x300, 0x2580}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000011d00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000011f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012400)="504d4d00504d4dffe1f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000012600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000012b00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x40000}, {&(0x7f0000012d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x407e0}, {&(0x7f0000012e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50000}], 0x0, &(0x7f0000012f00)) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) 05:47:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000", 0x4, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:47:10 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2, r2}) 05:47:10 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x3dfff, 0x8001) 05:47:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 61) 05:47:10 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:47:10 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 05:47:10 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 1241.479004] FAULT_INJECTION: forcing a failure. [ 1241.479004] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1241.481716] CPU: 0 PID: 10561 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1241.483211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1241.485071] Call Trace: [ 1241.485671] dump_stack+0x107/0x167 [ 1241.486500] should_fail.cold+0x5/0xa [ 1241.487386] __alloc_pages_nodemask+0x182/0x600 [ 1241.488429] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1241.489807] ? find_get_entry+0x2c8/0x740 [ 1241.490732] ? exc_page_fault+0xca/0x1a0 [ 1241.491637] ? trace_hardirqs_on+0x5b/0x180 [ 1241.492629] alloc_pages_current+0x187/0x280 [ 1241.493644] __page_cache_alloc+0x2d2/0x360 [ 1241.494635] pagecache_get_page+0x2c7/0xc80 [ 1241.495617] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1241.496765] grab_cache_page_write_begin+0x64/0xa0 [ 1241.497876] simple_write_begin+0x30/0x2e0 [ 1241.498855] generic_perform_write+0x20a/0x4f0 [ 1241.499932] ? page_cache_prev_miss+0x310/0x310 [ 1241.500978] ? evict_inodes+0x470/0x470 [ 1241.501870] ? generic_write_checks+0x2ad/0x390 [ 1241.502935] __generic_file_write_iter+0x39d/0x5d0 [ 1241.504052] generic_file_write_iter+0xdb/0x230 [ 1241.505111] ? iov_iter_init+0x3c/0x130 [ 1241.506013] new_sync_write+0x42c/0x660 [ 1241.506918] ? new_sync_read+0x6f0/0x6f0 [ 1241.507819] ? __x64_sys_pwrite64+0x201/0x260 [ 1241.508838] ? lock_release+0x680/0x680 [ 1241.509737] ? avc_policy_seqno+0x9/0x70 [ 1241.510643] ? selinux_file_permission+0x92/0x520 [ 1241.511730] ? security_file_permission+0xb1/0xe0 [ 1241.512811] vfs_write+0x7c0/0xb10 [ 1241.513620] __x64_sys_pwrite64+0x201/0x260 [ 1241.514609] ? ksys_pwrite64+0x1b0/0x1b0 [ 1241.515537] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1241.516727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1241.517884] do_syscall_64+0x33/0x40 [ 1241.518723] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1241.519864] RIP: 0033:0x7f3eb14f5b19 [ 1241.520688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1241.524785] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1241.526463] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1241.528072] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1241.528931] FAULT_INJECTION: forcing a failure. [ 1241.528931] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.529650] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1241.529662] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1241.529674] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1241.537845] CPU: 1 PID: 10568 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1241.539549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1241.541621] Call Trace: [ 1241.542274] dump_stack+0x107/0x167 [ 1241.543194] should_fail.cold+0x5/0xa [ 1241.544161] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1241.545477] should_failslab+0x5/0x20 [ 1241.546426] __kmalloc_node+0x76/0x420 [ 1241.547418] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1241.548680] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1241.549955] kmem_cache_alloc_bulk+0x182/0x320 [ 1241.551194] FAULT_INJECTION: forcing a failure. [ 1241.551194] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.551310] io_submit_sqes+0x6fe4/0x8610 [ 1241.551382] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1241.555796] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1241.557022] ? find_held_lock+0x2c/0x110 [ 1241.558061] ? io_submit_sqes+0x8610/0x8610 [ 1241.559149] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1241.560360] ? wait_for_completion_io+0x270/0x270 [ 1241.561562] ? rcu_read_lock_any_held+0x75/0xa0 [ 1241.562702] ? vfs_write+0x354/0xb10 [ 1241.563638] ? fput_many+0x2f/0x1a0 [ 1241.564547] ? ksys_write+0x1a9/0x260 [ 1241.565491] ? __ia32_sys_read+0xb0/0xb0 [ 1241.566509] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1241.567806] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1241.569091] do_syscall_64+0x33/0x40 [ 1241.570007] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1241.571258] RIP: 0033:0x7f336a295b19 [ 1241.572164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1241.576742] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1241.578616] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1241.580394] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1241.582161] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1241.583932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1241.585699] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 [ 1241.587514] CPU: 0 PID: 10573 Comm: syz-executor.0 Not tainted 5.10.253 #1 [ 1241.589308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1241.591414] Call Trace: [ 1241.592100] dump_stack+0x107/0x167 [ 1241.593029] should_fail.cold+0x5/0xa [ 1241.593995] ? create_object.isra.0+0x3a/0xa30 [ 1241.595157] should_failslab+0x5/0x20 [ 1241.596128] kmem_cache_alloc+0x5b/0x310 [ 1241.597157] ? mark_held_locks+0x9e/0xe0 [ 1241.598188] create_object.isra.0+0x3a/0xa30 [ 1241.599291] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1241.600596] kmem_cache_alloc_bulk+0x168/0x320 [ 1241.601751] io_submit_sqes+0x6fe4/0x8610 [ 1241.602628] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1241.603894] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1241.605122] ? find_held_lock+0x2c/0x110 [ 1241.606164] ? io_submit_sqes+0x8610/0x8610 [ 1241.607261] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1241.608502] ? wait_for_completion_io+0x270/0x270 [ 1241.609729] ? rcu_read_lock_any_held+0x75/0xa0 [ 1241.610897] ? vfs_write+0x354/0xb10 [ 1241.611857] ? fput_many+0x2f/0x1a0 [ 1241.612603] ? ksys_write+0x1a9/0x260 [ 1241.613561] ? __ia32_sys_read+0xb0/0xb0 [ 1241.614596] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1241.615932] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1241.617231] do_syscall_64+0x33/0x40 [ 1241.618163] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1241.619446] RIP: 0033:0x7f87bbbf4b19 [ 1241.620401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1241.625014] RSP: 002b:00007f87b916a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1241.626925] RAX: ffffffffffffffda RBX: 00007f87bbd07f60 RCX: 00007f87bbbf4b19 [ 1241.628722] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1241.630514] RBP: 00007f87b916a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1241.632323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.634118] R13: 00007ffeb1e6d13f R14: 00007f87b916a300 R15: 0000000000022000 [ 1241.637823] loop5: detected capacity change from 0 to 1048576 [ 1241.651764] loop4: detected capacity change from 0 to 2097152 [ 1241.668467] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1241.670810] EXT4-fs (loop4): group descriptors corrupted! 05:47:10 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:47:10 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 62) [ 1241.684285] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1241.686194] ext4 filesystem being mounted at /syzkaller-testdir078525148/syzkaller.C4cJDY/126/file0 supports timestamps until 2038-01-19 (0x7fffffff) 05:47:10 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x3efff, 0x8001) 05:47:10 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) [ 1241.812137] FAULT_INJECTION: forcing a failure. [ 1241.812137] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.814760] CPU: 1 PID: 10591 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1241.816312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1241.818126] Call Trace: [ 1241.818713] dump_stack+0x107/0x167 [ 1241.819516] should_fail.cold+0x5/0xa [ 1241.820362] ? create_object.isra.0+0x3a/0xa30 [ 1241.821354] should_failslab+0x5/0x20 [ 1241.822187] kmem_cache_alloc+0x5b/0x310 [ 1241.823077] ? find_held_lock+0x2c/0x110 [ 1241.823970] create_object.isra.0+0x3a/0xa30 [ 1241.824932] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1241.826044] __kmalloc_node+0x1ae/0x420 [ 1241.826923] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1241.828024] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1241.829114] kmem_cache_alloc_bulk+0x182/0x320 [ 1241.830113] io_submit_sqes+0x6fe4/0x8610 [ 1241.831052] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1241.832142] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1241.833202] ? find_held_lock+0x2c/0x110 [ 1241.834091] ? io_submit_sqes+0x8610/0x8610 [ 1241.835030] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1241.836081] ? wait_for_completion_io+0x270/0x270 [ 1241.837139] ? rcu_read_lock_any_held+0x75/0xa0 [ 1241.838146] ? vfs_write+0x354/0xb10 [ 1241.838958] ? fput_many+0x2f/0x1a0 [ 1241.839757] ? ksys_write+0x1a9/0x260 [ 1241.840596] ? __ia32_sys_read+0xb0/0xb0 [ 1241.841484] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1241.842624] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1241.843731] do_syscall_64+0x33/0x40 [ 1241.844528] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1241.845626] RIP: 0033:0x7f336a295b19 [ 1241.846416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1241.850336] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1241.851986] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1241.853508] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1241.855041] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1241.856582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1241.858100] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 [ 1241.868048] FAULT_INJECTION: forcing a failure. [ 1241.868048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1241.870620] CPU: 1 PID: 10588 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1241.872094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1241.873853] Call Trace: [ 1241.874413] dump_stack+0x107/0x167 [ 1241.875188] should_fail.cold+0x5/0xa [ 1241.876009] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1241.877137] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1241.878202] ? simple_write_begin+0x109/0x2e0 [ 1241.879144] generic_perform_write+0x279/0x4f0 [ 1241.880116] ? __mnt_drop_write_file+0x9/0x70 [ 1241.881049] ? page_cache_prev_miss+0x310/0x310 [ 1241.882031] ? evict_inodes+0x470/0x470 [ 1241.882863] ? generic_write_checks+0x2ad/0x390 [ 1241.883858] __generic_file_write_iter+0x39d/0x5d0 [ 1241.884889] generic_file_write_iter+0xdb/0x230 [ 1241.885852] ? iov_iter_init+0x3c/0x130 [ 1241.886721] new_sync_write+0x42c/0x660 [ 1241.887553] ? new_sync_read+0x6f0/0x6f0 [ 1241.888453] ? __x64_sys_pwrite64+0x201/0x260 [ 1241.889398] ? lock_release+0x680/0x680 [ 1241.890229] ? avc_policy_seqno+0x9/0x70 [ 1241.891072] ? selinux_file_permission+0x92/0x520 [ 1241.892100] ? security_file_permission+0xb1/0xe0 [ 1241.893109] vfs_write+0x7c0/0xb10 [ 1241.893853] __x64_sys_pwrite64+0x201/0x260 [ 1241.894742] ? ksys_pwrite64+0x1b0/0x1b0 [ 1241.895579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1241.896661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1241.897729] do_syscall_64+0x33/0x40 [ 1241.898499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1241.899562] RIP: 0033:0x7f3eb14f5b19 [ 1241.900349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1241.904128] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1241.905698] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1241.907166] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1241.908640] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1241.910107] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1241.911550] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:47:11 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 05:47:11 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x3ffff, 0x8001) [ 1241.994716] FAULT_INJECTION: forcing a failure. [ 1241.994716] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.997114] CPU: 0 PID: 10596 Comm: syz-executor.0 Not tainted 5.10.253 #1 [ 1241.998505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1242.000188] Call Trace: [ 1242.000729] dump_stack+0x107/0x167 [ 1242.001461] should_fail.cold+0x5/0xa [ 1242.002234] ? create_object.isra.0+0x3a/0xa30 [ 1242.003137] should_failslab+0x5/0x20 [ 1242.003902] kmem_cache_alloc+0x5b/0x310 [ 1242.004710] ? mark_held_locks+0x9e/0xe0 [ 1242.005525] create_object.isra.0+0x3a/0xa30 [ 1242.006393] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1242.007405] kmem_cache_alloc_bulk+0x168/0x320 [ 1242.008324] io_submit_sqes+0x6fe4/0x8610 [ 1242.009182] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1242.010169] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1242.011133] ? find_held_lock+0x2c/0x110 [ 1242.011957] ? io_submit_sqes+0x8610/0x8610 [ 1242.012818] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1242.013775] ? wait_for_completion_io+0x270/0x270 [ 1242.014739] ? rcu_read_lock_any_held+0x75/0xa0 [ 1242.015653] ? vfs_write+0x354/0xb10 [ 1242.016404] ? fput_many+0x2f/0x1a0 [ 1242.017115] ? ksys_write+0x1a9/0x260 [ 1242.017858] ? __ia32_sys_read+0xb0/0xb0 [ 1242.018660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1242.019693] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1242.020724] do_syscall_64+0x33/0x40 [ 1242.021454] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1242.022457] RIP: 0033:0x7f87bbbf4b19 [ 1242.023190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1242.026789] RSP: 002b:00007f87b916a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1242.028293] RAX: ffffffffffffffda RBX: 00007f87bbd07f60 RCX: 00007f87bbbf4b19 [ 1242.029684] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1242.031082] RBP: 00007f87b916a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1242.032473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1242.033854] R13: 00007ffeb1e6d13f R14: 00007f87b916a300 R15: 0000000000022000 05:47:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 63) 05:47:27 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:47:27 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000340)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)={0x203080, 0x100, 0x10}, &(0x7f0000000180)='./file0\x00', 0x18}, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x4008, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r6, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) 05:47:27 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 05:47:27 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2, r2}) 05:47:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000", 0x4, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:47:27 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 05:47:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x40fff, 0x8001) [ 1258.196410] FAULT_INJECTION: forcing a failure. [ 1258.196410] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.198978] CPU: 1 PID: 10615 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1258.199574] loop4: detected capacity change from 0 to 2097152 [ 1258.200457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1258.200465] Call Trace: [ 1258.200492] dump_stack+0x107/0x167 [ 1258.200518] should_fail.cold+0x5/0xa [ 1258.205655] ? create_object.isra.0+0x3a/0xa30 [ 1258.206624] should_failslab+0x5/0x20 [ 1258.207435] kmem_cache_alloc+0x5b/0x310 [ 1258.208313] create_object.isra.0+0x3a/0xa30 [ 1258.209246] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1258.210324] __kmalloc+0x16e/0x390 [ 1258.211090] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1258.212154] iovec_from_user+0x36c/0x400 [ 1258.213023] __import_iovec+0x67/0x590 [ 1258.213867] ? find_held_lock+0x2c/0x110 [ 1258.214734] io_import_iovec+0x581/0x1120 [ 1258.215634] ? io_complete_rw+0x230/0x230 [ 1258.216521] ? trace_hardirqs_on+0x5b/0x180 [ 1258.217429] ? kasan_unpoison_shadow+0x33/0x50 [ 1258.218408] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1258.219491] io_req_prep_async+0x560/0xb10 [ 1258.220400] ? __fget_files+0x2f8/0x520 [ 1258.221241] ? io_recv+0xae0/0xae0 [ 1258.221994] ? io_prep_rw+0x7f5/0x1050 [ 1258.222830] io_submit_sqes+0x3bcb/0x8610 [ 1258.223743] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1258.224815] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1258.225841] ? find_held_lock+0x2c/0x110 [ 1258.226718] ? io_submit_sqes+0x8610/0x8610 [ 1258.227635] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1258.228662] ? wait_for_completion_io+0x270/0x270 [ 1258.229678] ? rcu_read_lock_any_held+0x75/0xa0 [ 1258.230652] ? vfs_write+0x354/0xb10 [ 1258.231452] ? fput_many+0x2f/0x1a0 [ 1258.232237] ? ksys_write+0x1a9/0x260 [ 1258.233046] ? __ia32_sys_read+0xb0/0xb0 [ 1258.233916] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1258.235054] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1258.236172] do_syscall_64+0x33/0x40 [ 1258.236971] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1258.238063] RIP: 0033:0x7f336a295b19 [ 1258.238857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1258.242774] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1258.244419] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1258.245973] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1258.247522] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1258.249046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1258.250578] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 [ 1258.258807] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1258.260823] EXT4-fs (loop4): group descriptors corrupted! [ 1258.268438] FAULT_INJECTION: forcing a failure. [ 1258.268438] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.271045] CPU: 1 PID: 10618 Comm: syz-executor.0 Not tainted 5.10.253 #1 [ 1258.272591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1258.274418] Call Trace: [ 1258.275011] dump_stack+0x107/0x167 [ 1258.275819] should_fail.cold+0x5/0xa [ 1258.276650] ? create_object.isra.0+0x3a/0xa30 [ 1258.277650] should_failslab+0x5/0x20 [ 1258.278464] kmem_cache_alloc+0x5b/0x310 [ 1258.279321] ? mark_held_locks+0x9e/0xe0 [ 1258.280224] create_object.isra.0+0x3a/0xa30 [ 1258.281188] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1258.282292] kmem_cache_alloc_bulk+0x168/0x320 [ 1258.283267] io_submit_sqes+0x6fe4/0x8610 [ 1258.284214] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1258.285305] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1258.286363] ? find_held_lock+0x2c/0x110 [ 1258.287260] ? io_submit_sqes+0x8610/0x8610 [ 1258.288219] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1258.289282] ? wait_for_completion_io+0x270/0x270 [ 1258.290341] ? rcu_read_lock_any_held+0x75/0xa0 [ 1258.291354] ? vfs_write+0x354/0xb10 [ 1258.292219] ? fput_many+0x2f/0x1a0 [ 1258.293042] ? ksys_write+0x1a9/0x260 [ 1258.293852] ? __ia32_sys_read+0xb0/0xb0 [ 1258.294743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1258.295972] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1258.297111] do_syscall_64+0x33/0x40 [ 1258.297971] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1258.299153] RIP: 0033:0x7f87bbbf4b19 [ 1258.299952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1258.303580] FAULT_INJECTION: forcing a failure. [ 1258.303580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1258.304078] RSP: 002b:00007f87b916a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1258.304099] RAX: ffffffffffffffda RBX: 00007f87bbd07f60 RCX: 00007f87bbbf4b19 [ 1258.304111] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1258.304122] RBP: 00007f87b916a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1258.304143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.314764] R13: 00007ffeb1e6d13f R14: 00007f87b916a300 R15: 0000000000022000 [ 1258.316413] CPU: 0 PID: 10616 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1258.317980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1258.319839] Call Trace: [ 1258.320471] dump_stack+0x107/0x167 [ 1258.321289] should_fail.cold+0x5/0xa [ 1258.322165] __alloc_pages_nodemask+0x182/0x600 [ 1258.323275] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1258.324636] ? find_get_entry+0x2c8/0x740 [ 1258.325598] ? exc_page_fault+0xca/0x1a0 [ 1258.326732] ? trace_hardirqs_on+0x5b/0x180 [ 1258.327743] alloc_pages_current+0x187/0x280 [ 1258.328751] __page_cache_alloc+0x2d2/0x360 [ 1258.329734] pagecache_get_page+0x2c7/0xc80 [ 1258.330713] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1258.331870] grab_cache_page_write_begin+0x64/0xa0 [ 1258.333043] simple_write_begin+0x30/0x2e0 [ 1258.333965] generic_perform_write+0x20a/0x4f0 [ 1258.335008] ? page_cache_prev_miss+0x310/0x310 [ 1258.336110] ? evict_inodes+0x470/0x470 [ 1258.336990] ? generic_write_checks+0x2ad/0x390 [ 1258.338023] __generic_file_write_iter+0x39d/0x5d0 [ 1258.339133] generic_file_write_iter+0xdb/0x230 [ 1258.340204] ? iov_iter_init+0x3c/0x130 [ 1258.341063] new_sync_write+0x42c/0x660 [ 1258.341990] ? new_sync_read+0x6f0/0x6f0 [ 1258.342916] ? __x64_sys_pwrite64+0x201/0x260 [ 1258.343939] ? lock_release+0x680/0x680 [ 1258.344833] ? avc_policy_seqno+0x9/0x70 [ 1258.345727] ? selinux_file_permission+0x92/0x520 [ 1258.346801] ? security_file_permission+0xb1/0xe0 [ 1258.347852] vfs_write+0x7c0/0xb10 [ 1258.348642] __x64_sys_pwrite64+0x201/0x260 [ 1258.349608] ? ksys_pwrite64+0x1b0/0x1b0 [ 1258.350551] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1258.351720] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1258.352950] do_syscall_64+0x33/0x40 [ 1258.353767] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1258.354941] RIP: 0033:0x7f3eb14f5b19 [ 1258.355762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1258.359853] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1258.361569] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1258.363163] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1258.364771] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1258.366294] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1258.367916] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:47:27 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:47:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 64) 05:47:27 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 05:47:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000", 0x4, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:47:27 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 05:47:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x41fff, 0x8001) 05:47:27 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:47:27 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2, r2}) [ 1258.592850] FAULT_INJECTION: forcing a failure. [ 1258.592850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1258.595527] CPU: 0 PID: 10632 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1258.596716] FAULT_INJECTION: forcing a failure. [ 1258.596716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1258.597052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1258.597068] Call Trace: [ 1258.601706] dump_stack+0x107/0x167 [ 1258.602497] should_fail.cold+0x5/0xa [ 1258.603323] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1258.604477] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1258.605573] ? simple_write_begin+0x109/0x2e0 [ 1258.606541] generic_perform_write+0x279/0x4f0 [ 1258.607528] ? __mnt_drop_write_file+0x9/0x70 [ 1258.608503] ? page_cache_prev_miss+0x310/0x310 [ 1258.609511] ? evict_inodes+0x470/0x470 [ 1258.610415] ? generic_write_checks+0x2ad/0x390 [ 1258.611433] __generic_file_write_iter+0x39d/0x5d0 [ 1258.612556] generic_file_write_iter+0xdb/0x230 [ 1258.613562] ? iov_iter_init+0x3c/0x130 [ 1258.614431] new_sync_write+0x42c/0x660 [ 1258.615297] ? new_sync_read+0x6f0/0x6f0 [ 1258.616189] ? __x64_sys_pwrite64+0x201/0x260 [ 1258.617166] ? lock_release+0x680/0x680 [ 1258.618036] ? avc_policy_seqno+0x9/0x70 [ 1258.618918] ? selinux_file_permission+0x92/0x520 [ 1258.619969] ? security_file_permission+0xb1/0xe0 [ 1258.621038] vfs_write+0x7c0/0xb10 [ 1258.621806] __x64_sys_pwrite64+0x201/0x260 [ 1258.622730] ? ksys_pwrite64+0x1b0/0x1b0 [ 1258.623618] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1258.624765] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1258.625885] do_syscall_64+0x33/0x40 [ 1258.626680] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1258.627791] RIP: 0033:0x7f3eb14f5b19 [ 1258.628604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1258.633263] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1258.635207] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1258.637069] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1258.638919] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1258.640792] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1258.642639] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1258.644515] CPU: 1 PID: 10635 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1258.645852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1258.647434] Call Trace: [ 1258.647944] dump_stack+0x107/0x167 [ 1258.648652] should_fail.cold+0x5/0xa [ 1258.649390] _copy_from_user+0x2e/0x1b0 [ 1258.650162] iovec_from_user+0x141/0x400 [ 1258.650947] __import_iovec+0x67/0x590 [ 1258.651694] ? find_held_lock+0x2c/0x110 [ 1258.652491] io_import_iovec+0x581/0x1120 [ 1258.653292] ? io_complete_rw+0x230/0x230 [ 1258.654082] ? trace_hardirqs_on+0x5b/0x180 [ 1258.654920] ? kasan_unpoison_shadow+0x33/0x50 [ 1258.655794] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1258.655974] FAULT_INJECTION: forcing a failure. [ 1258.655974] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.656771] io_req_prep_async+0x560/0xb10 [ 1258.656790] ? __fget_files+0x2f8/0x520 [ 1258.656815] ? io_recv+0xae0/0xae0 [ 1258.661899] ? io_prep_rw+0x7f5/0x1050 [ 1258.662670] io_submit_sqes+0x3bcb/0x8610 [ 1258.663492] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1258.664456] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1258.665394] ? find_held_lock+0x2c/0x110 [ 1258.666178] ? io_submit_sqes+0x8610/0x8610 [ 1258.667009] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1258.667935] ? wait_for_completion_io+0x270/0x270 [ 1258.668866] ? rcu_read_lock_any_held+0x75/0xa0 [ 1258.669760] ? vfs_write+0x354/0xb10 [ 1258.670474] ? fput_many+0x2f/0x1a0 [ 1258.671169] ? ksys_write+0x1a9/0x260 [ 1258.671898] ? __ia32_sys_read+0xb0/0xb0 [ 1258.672688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1258.673701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1258.674695] do_syscall_64+0x33/0x40 [ 1258.675410] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1258.676403] RIP: 0033:0x7f336a295b19 [ 1258.677114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1258.680610] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1258.682050] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1258.683400] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1258.684751] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1258.686104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1258.687435] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 [ 1258.688826] CPU: 0 PID: 10636 Comm: syz-executor.0 Not tainted 5.10.253 #1 [ 1258.690393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1258.692248] Call Trace: [ 1258.692828] dump_stack+0x107/0x167 [ 1258.693626] should_fail.cold+0x5/0xa [ 1258.694458] should_failslab+0x5/0x20 [ 1258.695288] kmem_cache_alloc_bulk+0x4b/0x320 [ 1258.696289] io_submit_sqes+0x6fe4/0x8610 [ 1258.697231] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1258.698374] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1258.699430] ? find_held_lock+0x2c/0x110 [ 1258.700350] ? io_submit_sqes+0x8610/0x8610 [ 1258.701313] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1258.702394] ? wait_for_completion_io+0x270/0x270 [ 1258.703459] ? rcu_read_lock_any_held+0x75/0xa0 [ 1258.704507] ? vfs_write+0x354/0xb10 [ 1258.705328] ? fput_many+0x2f/0x1a0 [ 1258.706125] ? ksys_write+0x1a9/0x260 [ 1258.706977] ? __ia32_sys_read+0xb0/0xb0 [ 1258.707870] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1258.709068] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1258.710217] do_syscall_64+0x33/0x40 [ 1258.711050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1258.712200] RIP: 0033:0x7f87bbbf4b19 [ 1258.713009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1258.717160] RSP: 002b:00007f87b916a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1258.718818] RAX: ffffffffffffffda RBX: 00007f87bbd07f60 RCX: 00007f87bbbf4b19 [ 1258.720369] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1258.721914] RBP: 00007f87b916a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1258.723457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1258.725006] R13: 00007ffeb1e6d13f R14: 00007f87b916a300 R15: 0000000000022000 05:47:27 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d4a2daef74caaad64a426f78a414dea19c3f39c2d3ba7bad5fb35718cea1224af38ff0030e7d96747f522fa802327974751fa1210ccaf5e48acfba0511fd6712ad94b9fea42218f5"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000340)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4008, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_io_uring_setup(0x7a9d, &(0x7f0000000040)={0x0, 0x79b8, 0x4, 0x0, 0xb8}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe44584e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f707e7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82bf6b"], 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20800) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2000, @fd, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000540)={0x3, 0xffffffffffffff0b, 0x5, 0x3, 0x2, 0x9, 0x0, 0xbb, 0xa004, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8001, 0x9}, 0x44980, 0xffffffff, 0x7, 0x8, 0xffffffffffffb99b, 0x287a, 0x3, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffffff, &(0x7f0000000240)='/proc/self/exe\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xfdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00'}) 05:47:27 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:47:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000001", 0x5}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1258.788092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 05:47:28 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x42fff, 0x8001) [ 1258.843494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 05:47:28 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:47:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2, r2}) 05:47:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000001", 0x5}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:47:28 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xf}}, './file1\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x78}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x24044044) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) write(r1, &(0x7f0000000000)="c91ed029e5ea10916bd905b3e461f89eed52d6dadcbdda1d354862490c40ff67f81fbe5d3c623bc70d0022a1fca86a72680f3a70f7a197f363158179cbf0950b62fe8d3fa76923b85548358305ad7610a0e61f570cc86ba79fff3a8e2681cd9951bda50ae5d7a6c9aa2c823daff2", 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'macvtap0\x00'}) mkdirat(r2, &(0x7f0000000280)='./file1\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x5}}, './file1\x00'}) fcntl$addseals(r4, 0x409, 0x1) r5 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="b2", 0x20000141, 0x8001) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) dup(r3) 05:47:28 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1258.969578] loop5: detected capacity change from 0 to 41948160 [ 1258.976282] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 1259.613656] loop5: detected capacity change from 0 to 41948160 [ 1259.617454] FAT-fs (loop5): Unrecognized mount option "" or missing value 05:47:40 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 05:47:40 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:47:40 executing program 5: prctl$PR_SET_IO_FLUSHER(0x39, 0x0) syz_emit_ethernet(0xbd, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff0180c250469d7e8dabd4198d000003080502ad011b05a3cf9d4e48919319dd8da2efb0cbb99c86eb14d04e955ad971a1be940fc877b22533ef15bd857d7802a506bcc8855f8f6875848c437fa6de0d8f607327147a9db9535f00000000000000d7f7ff2dd21dbc36e650a106df2c2dcd09137101f4731673eebc6952d0e99075d08e18ff829d55710be0cd243c902f593767dec0fc48312d14787b768d3126cdb07b8e47fa85ae18c0b9388a989982b7004c6925e06edf4471650e5b68b16fcbd0e3b02331dc4e7257b620d08b9b6aaeabdf45ae259373a21641cf44165e2d1695de"], 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x25, 0x5, 0x7f, 0x7, 0x0, 0x200, 0x90000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7, 0x8}, 0x2010, 0x200006, 0x0, 0x8, 0xda, 0x1, 0x9989, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) ftruncate(r0, 0x7) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2c}) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) 05:47:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="0200000001", 0x5}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:47:40 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 05:47:40 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x43fff, 0x8001) 05:47:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 65) 05:47:40 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1271.619104] FAULT_INJECTION: forcing a failure. [ 1271.619104] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.620991] CPU: 0 PID: 10682 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1271.622150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1271.623509] Call Trace: [ 1271.623952] dump_stack+0x107/0x167 [ 1271.624573] should_fail.cold+0x5/0xa [ 1271.625218] ? io_req_prep_async+0x170/0xb10 [ 1271.625935] should_failslab+0x5/0x20 [ 1271.626573] __kmalloc+0x72/0x390 [ 1271.627150] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1271.627993] io_req_prep_async+0x170/0xb10 [ 1271.628708] ? __fget_files+0x2f8/0x520 [ 1271.629376] ? io_recv+0xae0/0xae0 [ 1271.629964] ? io_prep_rw+0x7f5/0x1050 [ 1271.630629] io_submit_sqes+0x3bcb/0x8610 [ 1271.631345] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1271.632176] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1271.632993] ? find_held_lock+0x2c/0x110 [ 1271.633669] ? io_submit_sqes+0x8610/0x8610 [ 1271.634400] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1271.635205] ? wait_for_completion_io+0x270/0x270 [ 1271.636007] ? rcu_read_lock_any_held+0x75/0xa0 [ 1271.636775] ? vfs_write+0x354/0xb10 [ 1271.637415] ? fput_many+0x2f/0x1a0 [ 1271.638034] ? ksys_write+0x1a9/0x260 [ 1271.638654] ? __ia32_sys_read+0xb0/0xb0 [ 1271.639345] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1271.640164] FAULT_INJECTION: forcing a failure. [ 1271.640164] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.640239] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1271.642960] do_syscall_64+0x33/0x40 [ 1271.643586] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1271.644449] RIP: 0033:0x7f336a295b19 [ 1271.645074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1271.648194] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1271.649468] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1271.650659] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1271.651851] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1271.653064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1271.654264] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 [ 1271.655488] CPU: 1 PID: 10693 Comm: syz-executor.0 Not tainted 5.10.253 #1 [ 1271.656673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1271.658066] Call Trace: [ 1271.658510] dump_stack+0x107/0x167 [ 1271.659131] should_fail.cold+0x5/0xa [ 1271.659767] ? create_object.isra.0+0x3a/0xa30 [ 1271.660548] should_failslab+0x5/0x20 [ 1271.661193] kmem_cache_alloc+0x5b/0x310 [ 1271.661866] create_object.isra.0+0x3a/0xa30 [ 1271.662596] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1271.663447] __kmalloc+0x16e/0x390 [ 1271.664043] io_req_prep_async+0x170/0xb10 [ 1271.664746] ? __fget_files+0x2f8/0x520 [ 1271.665404] ? io_recv+0xae0/0xae0 [ 1271.665998] ? io_prep_rw+0x7f5/0x1050 [ 1271.666656] io_submit_sqes+0x3bcb/0x8610 [ 1271.667382] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1271.668221] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1271.669030] ? find_held_lock+0x2c/0x110 [ 1271.669708] ? io_submit_sqes+0x8610/0x8610 [ 1271.670442] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1271.671249] ? wait_for_completion_io+0x270/0x270 [ 1271.672059] ? rcu_read_lock_any_held+0x75/0xa0 [ 1271.672857] ? vfs_write+0x354/0xb10 [ 1271.673478] ? fput_many+0x2f/0x1a0 [ 1271.674084] ? ksys_write+0x1a9/0x260 [ 1271.674711] ? __ia32_sys_read+0xb0/0xb0 [ 1271.675403] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 05:47:40 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x44fff, 0x8001) [ 1271.676289] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1271.677265] do_syscall_64+0x33/0x40 [ 1271.677915] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1271.678768] RIP: 0033:0x7f87bbbf4b19 [ 1271.679384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1271.681865] FAULT_INJECTION: forcing a failure. [ 1271.681865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1271.682428] RSP: 002b:00007f87b916a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1271.682446] RAX: ffffffffffffffda RBX: 00007f87bbd07f60 RCX: 00007f87bbbf4b19 [ 1271.682455] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1271.682464] RBP: 00007f87b916a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1271.682480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1271.690438] R13: 00007ffeb1e6d13f R14: 00007f87b916a300 R15: 0000000000022000 [ 1271.691657] CPU: 0 PID: 10692 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1271.692486] loop4: detected capacity change from 0 to 2097152 [ 1271.692863] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1271.692875] Call Trace: [ 1271.695706] dump_stack+0x107/0x167 [ 1271.696353] should_fail.cold+0x5/0xa [ 1271.697010] __alloc_pages_nodemask+0x182/0x600 [ 1271.697807] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1271.698838] ? find_get_entry+0x2c8/0x740 [ 1271.699539] ? exc_page_fault+0xca/0x1a0 [ 1271.700252] ? trace_hardirqs_on+0x5b/0x180 [ 1271.700982] alloc_pages_current+0x187/0x280 [ 1271.701747] __page_cache_alloc+0x2d2/0x360 [ 1271.702515] pagecache_get_page+0x2c7/0xc80 [ 1271.703256] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1271.704166] grab_cache_page_write_begin+0x64/0xa0 [ 1271.704999] simple_write_begin+0x30/0x2e0 [ 1271.705747] generic_perform_write+0x20a/0x4f0 [ 1271.706553] ? page_cache_prev_miss+0x310/0x310 [ 1271.707371] ? evict_inodes+0x470/0x470 [ 1271.708064] ? generic_write_checks+0x2ad/0x390 [ 1271.708901] __generic_file_write_iter+0x39d/0x5d0 [ 1271.709757] generic_file_write_iter+0xdb/0x230 [ 1271.710559] ? iov_iter_init+0x3c/0x130 [ 1271.711236] new_sync_write+0x42c/0x660 [ 1271.711902] ? new_sync_read+0x6f0/0x6f0 [ 1271.712596] ? __x64_sys_pwrite64+0x201/0x260 [ 1271.713357] ? lock_release+0x680/0x680 [ 1271.714029] ? avc_policy_seqno+0x9/0x70 [ 1271.714713] ? selinux_file_permission+0x92/0x520 [ 1271.715576] ? security_file_permission+0xb1/0xe0 [ 1271.716413] vfs_write+0x7c0/0xb10 [ 1271.717042] __x64_sys_pwrite64+0x201/0x260 [ 1271.717792] ? ksys_pwrite64+0x1b0/0x1b0 [ 1271.718482] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1271.719410] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1271.720328] do_syscall_64+0x33/0x40 [ 1271.720985] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1271.721860] RIP: 0033:0x7f3eb14f5b19 [ 1271.722515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1271.725770] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1271.727061] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1271.728316] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1271.729525] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1271.730784] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1271.731968] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1271.734483] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1271.736066] EXT4-fs (loop4): group descriptors corrupted! 05:47:41 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 05:47:41 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1271.790855] FAULT_INJECTION: forcing a failure. [ 1271.790855] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.792858] CPU: 0 PID: 10706 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1271.794082] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1271.795515] Call Trace: [ 1271.795983] dump_stack+0x107/0x167 [ 1271.796634] should_fail.cold+0x5/0xa [ 1271.797311] ? create_object.isra.0+0x3a/0xa30 [ 1271.798110] should_failslab+0x5/0x20 [ 1271.798785] kmem_cache_alloc+0x5b/0x310 [ 1271.799500] create_object.isra.0+0x3a/0xa30 [ 1271.800295] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1271.801161] __kmalloc+0x16e/0x390 [ 1271.801791] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1271.802671] iovec_from_user+0x36c/0x400 [ 1271.803391] __import_iovec+0x67/0x590 [ 1271.804070] ? find_held_lock+0x2c/0x110 [ 1271.804795] io_import_iovec+0x581/0x1120 [ 1271.805532] ? io_complete_rw+0x230/0x230 [ 1271.806244] ? trace_hardirqs_on+0x5b/0x180 [ 1271.806993] ? kasan_unpoison_shadow+0x33/0x50 [ 1271.807798] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1271.808710] io_req_prep_async+0x560/0xb10 [ 1271.809454] ? __fget_files+0x2f8/0x520 [ 1271.810153] ? io_recv+0xae0/0xae0 [ 1271.810780] ? io_prep_rw+0x7f5/0x1050 [ 1271.811477] io_submit_sqes+0x3bcb/0x8610 [ 1271.812235] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1271.813120] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1271.813970] ? find_held_lock+0x2c/0x110 [ 1271.814692] ? io_submit_sqes+0x8610/0x8610 [ 1271.815450] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1271.816290] ? wait_for_completion_io+0x270/0x270 [ 1271.817135] ? rcu_read_lock_any_held+0x75/0xa0 [ 1271.817946] ? vfs_write+0x354/0xb10 [ 1271.818606] ? fput_many+0x2f/0x1a0 [ 1271.819223] ? ksys_write+0x1a9/0x260 [ 1271.819887] ? __ia32_sys_read+0xb0/0xb0 [ 1271.820594] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1271.821522] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1271.822434] do_syscall_64+0x33/0x40 [ 1271.823091] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1271.823969] RIP: 0033:0x7f336a295b19 [ 1271.824612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1271.827794] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1271.829095] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1271.830353] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1271.831581] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1271.832840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1271.834076] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 05:47:41 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='bpf\x00', 0x1000, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) unlinkat(r1, &(0x7f00000004c0)='./file0\x00', 0x200) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x81) mkdirat(r1, &(0x7f0000000140)='./file0\x00', 0x10) r2 = syz_mount_image$nfs(&(0x7f0000000280), &(0x7f00000003c0)='./file0\x00', 0x3, 0x1, &(0x7f0000000400)=[{&(0x7f0000000500)="fe5b56e884b210f92aefc95b0f0d1c2589bb3469b2243bc7616872634477b72e75a04d4886012c6390bce455594b68b056207be07d081f8ea3fc071f99b26f616ffdaafbb6991fca936356769782405baf50cbfd178a2d6598fe2a581cde8d1bf8b8c6bff6c482ea4ae9aa2e1617a5f218fd3e37c03d6a3497c78d0a35eaaee43a0393a098c75578168207058f42a073371d6086a726d19fa128572c63a31ab38cc218155d2306e3f649c9c2fd9eafd68a821ebcd81edec55df5b4d3fdf1718a1fdcf15685516f28d41ad8ccc8037bc12b62430ded4cd5a1dc1ff9e1a61f866d7a2caf8c9959c2eb39a2b4dfbe692d9bb881e2e093ef2e2f", 0xf8, 0x9}], 0x40, &(0x7f0000000440)={[{'cgroup2\x00'}, {'\x00'}, {'vfat\x00'}, {'+!['}], [{@appraise_type}, {@appraise}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}) r3 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r3, &(0x7f0000000140)="b2", 0x20000141, 0x8001) renameat2(r2, &(0x7f0000000600)='./file0\x00', r3, &(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x40, 0x0, 0x1, 0xff, 0x0, 0x5, 0xa1602, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x26000, 0x6, 0x1, 0x8, 0x0, 0xffff, 0x9, 0x0, 0x1ff, 0x0, 0x7}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000240)={@id={0x2, 0x0, @a}}) [ 1271.903800] cgroup2: Unknown parameter './file0' [ 1271.922201] nfs: Unknown parameter 'cgroup2' [ 1271.934661] cgroup2: Unknown parameter './file0' [ 1271.943270] nfs: Unknown parameter 'cgroup2' 05:47:59 executing program 5: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x400}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0xf506e1f7f5818609}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}}, 0x20040000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000440)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000100)={[{@noacl}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'virt_wifi0\x00', 0x0}) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB='./fmle0\x00'], &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='efivarfs\x00', 0x0, &(0x7f0000000740)='^,$+&\x00') ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x80000001, 0x82404) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r2, 0xfb7871d4cea15fdb}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x24048080) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x0, 0x0, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, 0x0, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x38}, 0x1, 0x0, 0x0, 0x6000c080}, 0x48141) 05:47:59 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:47:59 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x45fff, 0x8001) 05:47:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:47:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 66) 05:47:59 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 05:47:59 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 05:47:59 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1290.470926] FAULT_INJECTION: forcing a failure. [ 1290.470926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1290.474134] CPU: 0 PID: 10720 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1290.475950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1290.478133] Call Trace: [ 1290.478830] dump_stack+0x107/0x167 [ 1290.479791] should_fail.cold+0x5/0xa [ 1290.480809] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1290.482206] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1290.483542] ? simple_write_begin+0x109/0x2e0 [ 1290.484732] generic_perform_write+0x279/0x4f0 [ 1290.485907] FAULT_INJECTION: forcing a failure. [ 1290.485907] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.488787] ? __mnt_drop_write_file+0x9/0x70 [ 1290.489852] ? page_cache_prev_miss+0x310/0x310 [ 1290.490878] ? evict_inodes+0x470/0x470 [ 1290.491757] ? generic_write_checks+0x2ad/0x390 [ 1290.492806] __generic_file_write_iter+0x39d/0x5d0 [ 1290.493899] generic_file_write_iter+0xdb/0x230 [ 1290.494925] ? iov_iter_init+0x3c/0x130 [ 1290.495814] new_sync_write+0x42c/0x660 [ 1290.496712] ? new_sync_read+0x6f0/0x6f0 [ 1290.497607] ? __x64_sys_pwrite64+0x201/0x260 [ 1290.498612] ? lock_release+0x680/0x680 [ 1290.499498] ? avc_policy_seqno+0x9/0x70 [ 1290.500411] ? selinux_file_permission+0x92/0x520 [ 1290.501485] ? security_file_permission+0xb1/0xe0 [ 1290.502563] vfs_write+0x7c0/0xb10 [ 1290.503359] __x64_sys_pwrite64+0x201/0x260 [ 1290.504314] ? ksys_pwrite64+0x1b0/0x1b0 [ 1290.505226] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1290.506383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1290.507529] do_syscall_64+0x33/0x40 [ 1290.508388] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1290.509531] RIP: 0033:0x7f3eb14f5b19 [ 1290.510359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1290.514441] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1290.516129] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1290.517710] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1290.519293] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1290.520880] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1290.522464] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1290.524095] CPU: 1 PID: 10731 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1290.525816] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1290.527793] Call Trace: [ 1290.528438] dump_stack+0x107/0x167 [ 1290.529326] should_fail.cold+0x5/0xa [ 1290.530239] ? iovec_from_user+0x36c/0x400 [ 1290.531242] should_failslab+0x5/0x20 [ 1290.532145] __kmalloc+0x72/0x390 [ 1290.532990] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1290.534174] ? do_syscall_64+0x33/0x40 [ 1290.535099] iovec_from_user+0x36c/0x400 [ 1290.536069] __import_iovec+0x67/0x590 [ 1290.537015] ? find_held_lock+0x2c/0x110 [ 1290.537989] io_import_iovec+0x581/0x1120 [ 1290.538984] ? io_complete_rw+0x230/0x230 [ 1290.539967] ? trace_hardirqs_on+0x5b/0x180 [ 1290.541002] ? kasan_unpoison_shadow+0x33/0x50 [ 1290.542089] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1290.543307] io_req_prep_async+0x560/0xb10 [ 1290.544319] ? __fget_files+0x2f8/0x520 [ 1290.545278] ? io_recv+0xae0/0xae0 [ 1290.546126] ? io_prep_rw+0x7f5/0x1050 [ 1290.547061] io_submit_sqes+0x3bcb/0x8610 [ 1290.548082] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1290.549276] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1290.550427] ? find_held_lock+0x2c/0x110 [ 1290.551403] ? io_submit_sqes+0x8610/0x8610 [ 1290.552446] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1290.553584] ? wait_for_completion_io+0x270/0x270 [ 1290.554730] ? rcu_read_lock_any_held+0x75/0xa0 [ 1290.555819] ? vfs_write+0x354/0xb10 [ 1290.556714] ? fput_many+0x2f/0x1a0 [ 1290.557569] ? ksys_write+0x1a9/0x260 [ 1290.558473] ? __ia32_sys_read+0xb0/0xb0 [ 1290.559439] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1290.560683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1290.561902] do_syscall_64+0x33/0x40 [ 1290.562788] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1290.563995] RIP: 0033:0x7f336a295b19 [ 1290.564890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1290.569233] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1290.571036] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1290.572736] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1290.574426] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1290.576112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1290.577811] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 [ 1290.579989] loop4: detected capacity change from 0 to 2097152 [ 1290.611606] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1290.614128] EXT4-fs (loop4): group descriptors corrupted! [ 1290.624144] loop5: detected capacity change from 0 to 16776704 [ 1290.650553] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 1290.650553] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1290.650553] [ 1290.689724] EXT4-fs (loop5): mounted filesystem without journal. Opts: noacl,,errors=continue 05:48:18 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:48:18 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 67) 05:48:18 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:48:18 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:48:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x46fff, 0x8001) 05:48:18 executing program 3: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:48:18 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 05:48:18 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1309.473060] FAULT_INJECTION: forcing a failure. [ 1309.473060] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.476398] CPU: 1 PID: 10750 Comm: syz-executor.2 Not tainted 5.10.253 #1 [ 1309.478575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1309.480957] Call Trace: [ 1309.481720] dump_stack+0x107/0x167 [ 1309.482763] should_fail.cold+0x5/0xa [ 1309.483847] ? create_object.isra.0+0x3a/0xa30 [ 1309.485148] should_failslab+0x5/0x20 [ 1309.486229] kmem_cache_alloc+0x5b/0x310 [ 1309.487397] create_object.isra.0+0x3a/0xa30 [ 1309.488644] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1309.490074] __kmalloc+0x16e/0x390 [ 1309.491085] iovec_from_user+0x36c/0x400 [ 1309.492242] __import_iovec+0x67/0x590 [ 1309.493348] ? find_held_lock+0x2c/0x110 [ 1309.494505] io_import_iovec+0x581/0x1120 [ 1309.495685] ? io_complete_rw+0x230/0x230 [ 1309.496870] ? trace_hardirqs_on+0x5b/0x180 [ 1309.498091] ? kasan_unpoison_shadow+0x33/0x50 [ 1309.499379] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1309.500826] io_req_prep_async+0x560/0xb10 [ 1309.502022] ? __fget_files+0x2f8/0x520 [ 1309.503140] ? io_recv+0xae0/0xae0 [ 1309.504144] ? io_prep_rw+0x7f5/0x1050 [ 1309.505257] io_submit_sqes+0x3bcb/0x8610 [ 1309.506541] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1309.508106] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1309.509562] ? find_held_lock+0x2c/0x110 [ 1309.510964] ? io_submit_sqes+0x8610/0x8610 [ 1309.512282] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1309.513795] ? wait_for_completion_io+0x270/0x270 [ 1309.515358] ? rcu_read_lock_any_held+0x75/0xa0 [ 1309.516872] ? vfs_write+0x354/0xb10 [ 1309.517916] ? fput_many+0x2f/0x1a0 [ 1309.518928] ? ksys_write+0x1a9/0x260 [ 1309.520206] ? __ia32_sys_read+0xb0/0xb0 [ 1309.521362] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1309.522817] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1309.524260] do_syscall_64+0x33/0x40 [ 1309.525293] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1309.526481] RIP: 0033:0x7f336a295b19 [ 1309.527344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.531602] RSP: 002b:00007f336780b188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1309.533348] RAX: ffffffffffffffda RBX: 00007f336a3a8f60 RCX: 00007f336a295b19 [ 1309.535121] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1309.536883] RBP: 00007f336780b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.538742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1309.540527] R13: 00007fff5ce1f08f R14: 00007f336780b300 R15: 0000000000022000 05:48:18 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0xe, 0x0, 0x0, 0x0, 0x0) [ 1309.578507] loop4: detected capacity change from 0 to 2097152 05:48:18 executing program 3: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1309.628828] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1309.630872] EXT4-fs (loop4): group descriptors corrupted! 05:48:18 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x47fff, 0x8001) [ 1309.647836] FAULT_INJECTION: forcing a failure. [ 1309.647836] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1309.650431] CPU: 1 PID: 10766 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1309.651904] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1309.653689] Call Trace: [ 1309.654266] dump_stack+0x107/0x167 [ 1309.655049] should_fail.cold+0x5/0xa [ 1309.655870] __alloc_pages_nodemask+0x182/0x600 [ 1309.656887] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1309.658154] ? find_get_entry+0x2c8/0x740 [ 1309.659020] ? exc_page_fault+0xca/0x1a0 [ 1309.659860] ? trace_hardirqs_on+0x5b/0x180 [ 1309.660783] alloc_pages_current+0x187/0x280 [ 1309.661758] __page_cache_alloc+0x2d2/0x360 [ 1309.662691] pagecache_get_page+0x2c7/0xc80 [ 1309.663597] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1309.664675] grab_cache_page_write_begin+0x64/0xa0 [ 1309.665702] simple_write_begin+0x30/0x2e0 [ 1309.666568] generic_perform_write+0x20a/0x4f0 [ 1309.667508] ? __mnt_drop_write_file+0x9/0x70 [ 1309.668444] ? page_cache_prev_miss+0x310/0x310 [ 1309.669439] ? evict_inodes+0x470/0x470 [ 1309.670271] ? generic_write_checks+0x2ad/0x390 [ 1309.671257] __generic_file_write_iter+0x39d/0x5d0 [ 1309.672295] generic_file_write_iter+0xdb/0x230 [ 1309.673453] ? iov_iter_init+0x3c/0x130 [ 1309.674455] new_sync_write+0x42c/0x660 [ 1309.675457] ? new_sync_read+0x6f0/0x6f0 [ 1309.676472] ? __x64_sys_pwrite64+0x201/0x260 [ 1309.677607] ? lock_release+0x680/0x680 [ 1309.678611] ? avc_policy_seqno+0x9/0x70 [ 1309.679629] ? selinux_file_permission+0x92/0x520 [ 1309.680870] ? security_file_permission+0xb1/0xe0 [ 1309.682098] vfs_write+0x7c0/0xb10 [ 1309.683000] __x64_sys_pwrite64+0x201/0x260 [ 1309.684084] ? ksys_pwrite64+0x1b0/0x1b0 [ 1309.685122] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1309.686435] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1309.687744] do_syscall_64+0x33/0x40 [ 1309.688691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1309.689963] RIP: 0033:0x7f3eb14f5b19 [ 1309.690889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.695436] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1309.697316] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1309.699072] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1309.700850] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.702605] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1309.704344] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:48:18 executing program 3: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:48:18 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 05:48:19 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:48:19 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:48:19 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:48:19 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:48:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 68) 05:48:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:48:19 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x48fff, 0x8001) 05:48:19 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1309.939143] loop4: detected capacity change from 0 to 2097152 05:48:19 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) [ 1309.971682] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1309.973945] EXT4-fs (loop4): group descriptors corrupted! [ 1310.042054] FAULT_INJECTION: forcing a failure. [ 1310.042054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1310.044719] CPU: 1 PID: 10801 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1310.046248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1310.048108] Call Trace: [ 1310.048708] dump_stack+0x107/0x167 [ 1310.049521] should_fail.cold+0x5/0xa [ 1310.050379] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1310.051553] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1310.052680] ? simple_write_begin+0x109/0x2e0 [ 1310.053674] generic_perform_write+0x279/0x4f0 [ 1310.054685] ? page_cache_prev_miss+0x310/0x310 [ 1310.055702] ? evict_inodes+0x470/0x470 [ 1310.056583] ? generic_write_checks+0x2ad/0x390 [ 1310.057610] __generic_file_write_iter+0x39d/0x5d0 [ 1310.058698] generic_file_write_iter+0xdb/0x230 [ 1310.059715] ? iov_iter_init+0x3c/0x130 [ 1310.060602] new_sync_write+0x42c/0x660 [ 1310.061476] ? new_sync_read+0x6f0/0x6f0 [ 1310.062357] ? __x64_sys_pwrite64+0x201/0x260 [ 1310.063338] ? lock_release+0x680/0x680 [ 1310.064199] ? avc_policy_seqno+0x9/0x70 [ 1310.065093] ? selinux_file_permission+0x92/0x520 [ 1310.066142] ? security_file_permission+0xb1/0xe0 [ 1310.067202] vfs_write+0x7c0/0xb10 [ 1310.067983] __x64_sys_pwrite64+0x201/0x260 [ 1310.068937] ? ksys_pwrite64+0x1b0/0x1b0 [ 1310.069833] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1310.070975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1310.072108] do_syscall_64+0x33/0x40 [ 1310.072923] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1310.074038] RIP: 0033:0x7f3eb14f5b19 [ 1310.074857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1310.078834] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1310.080490] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1310.082033] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1310.083573] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1310.085114] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1310.086635] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:48:42 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:48:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 69) 05:48:42 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) 05:48:42 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:48:42 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:48:42 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:48:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:48:42 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x49fff, 0x8001) [ 1333.329665] loop4: detected capacity change from 0 to 2097152 [ 1333.351107] FAULT_INJECTION: forcing a failure. [ 1333.351107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1333.354397] CPU: 1 PID: 10811 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1333.356094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1333.358109] Call Trace: [ 1333.358747] dump_stack+0x107/0x167 [ 1333.359634] should_fail.cold+0x5/0xa [ 1333.360564] __alloc_pages_nodemask+0x182/0x600 [ 1333.361695] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1333.363152] ? find_get_entry+0x2c8/0x740 [ 1333.364144] ? exc_page_fault+0xca/0x1a0 [ 1333.365128] ? trace_hardirqs_on+0x5b/0x180 [ 1333.366186] alloc_pages_current+0x187/0x280 [ 1333.367250] __page_cache_alloc+0x2d2/0x360 [ 1333.368283] pagecache_get_page+0x2c7/0xc80 [ 1333.369332] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1333.370554] grab_cache_page_write_begin+0x64/0xa0 [ 1333.371742] simple_write_begin+0x30/0x2e0 [ 1333.372766] generic_perform_write+0x20a/0x4f0 [ 1333.373892] ? __mnt_drop_write_file+0x9/0x70 [ 1333.374975] ? page_cache_prev_miss+0x310/0x310 [ 1333.376099] ? evict_inodes+0x470/0x470 [ 1333.377063] ? generic_write_checks+0x2ad/0x390 [ 1333.378199] __generic_file_write_iter+0x39d/0x5d0 [ 1333.379388] generic_file_write_iter+0xdb/0x230 [ 1333.380505] ? iov_iter_init+0x3c/0x130 [ 1333.381478] new_sync_write+0x42c/0x660 [ 1333.382436] ? new_sync_read+0x6f0/0x6f0 [ 1333.383400] ? __x64_sys_pwrite64+0x201/0x260 [ 1333.384479] ? lock_release+0x680/0x680 [ 1333.385428] ? avc_policy_seqno+0x9/0x70 [ 1333.386392] ? selinux_file_permission+0x92/0x520 [ 1333.387538] ? security_file_permission+0xb1/0xe0 [ 1333.388695] vfs_write+0x7c0/0xb10 [ 1333.389562] __x64_sys_pwrite64+0x201/0x260 [ 1333.390575] ? ksys_pwrite64+0x1b0/0x1b0 [ 1333.391547] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1333.392792] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1333.394037] do_syscall_64+0x33/0x40 [ 1333.394926] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1333.396139] RIP: 0033:0x7f3eb14f5b19 [ 1333.397035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1333.401407] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1333.403257] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1333.404969] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1333.406676] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1333.408356] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1333.410048] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1333.420008] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1333.421927] EXT4-fs (loop4): group descriptors corrupted! 05:48:42 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xea, 0x0, 0x0, 0x0) 05:48:42 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:48:42 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:48:42 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:48:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 70) 05:48:57 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:48:57 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x4afff, 0x8001) 05:48:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 05:48:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:48:57 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:48:57 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 05:48:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1348.206582] loop4: detected capacity change from 0 to 2097152 [ 1348.212724] FAULT_INJECTION: forcing a failure. [ 1348.212724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1348.215820] CPU: 1 PID: 10843 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1348.217590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1348.219686] Call Trace: [ 1348.220357] dump_stack+0x107/0x167 [ 1348.221231] should_fail.cold+0x5/0xa [ 1348.221846] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1348.222672] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1348.223496] ? simple_write_begin+0x109/0x2e0 [ 1348.224208] generic_perform_write+0x279/0x4f0 [ 1348.224939] ? __mnt_drop_write_file+0x9/0x70 [ 1348.225664] ? page_cache_prev_miss+0x310/0x310 [ 1348.226381] ? evict_inodes+0x470/0x470 [ 1348.227027] ? generic_write_checks+0x2ad/0x390 [ 1348.227790] __generic_file_write_iter+0x39d/0x5d0 [ 1348.228568] generic_file_write_iter+0xdb/0x230 [ 1348.229304] ? iov_iter_init+0x3c/0x130 [ 1348.229931] new_sync_write+0x42c/0x660 [ 1348.230567] ? new_sync_read+0x6f0/0x6f0 [ 1348.231215] ? __x64_sys_pwrite64+0x201/0x260 [ 1348.231918] ? lock_release+0x680/0x680 [ 1348.232541] ? avc_policy_seqno+0x9/0x70 [ 1348.233188] ? selinux_file_permission+0x92/0x520 [ 1348.233955] ? security_file_permission+0xb1/0xe0 [ 1348.234717] vfs_write+0x7c0/0xb10 [ 1348.235279] __x64_sys_pwrite64+0x201/0x260 [ 1348.235949] ? ksys_pwrite64+0x1b0/0x1b0 [ 1348.236585] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1348.237435] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1348.238258] do_syscall_64+0x33/0x40 [ 1348.238849] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1348.239666] RIP: 0033:0x7f3eb14f5b19 [ 1348.240241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1348.243124] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1348.244322] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1348.245452] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1348.246601] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1348.247740] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1348.248855] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1348.252699] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1348.254157] EXT4-fs (loop4): group descriptors corrupted! 05:48:57 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:48:57 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) 05:48:57 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x58ab, 0x0, 0x0, 0x0) 05:48:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 05:48:57 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:48:57 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x4bfff, 0x8001) 05:48:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:48:57 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1348.442115] loop4: detected capacity change from 0 to 2097152 [ 1348.473264] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1348.474752] EXT4-fs (loop4): group descriptors corrupted! 05:49:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 71) 05:49:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 05:49:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x4cfff, 0x8001) 05:49:13 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeaff, 0x0, 0x0, 0x0) 05:49:13 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:49:13 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:49:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:49:13 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xab58, 0x0, 0x0, 0x0) [ 1364.015339] FAULT_INJECTION: forcing a failure. [ 1364.015339] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1364.017965] CPU: 1 PID: 10894 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1364.019145] loop4: detected capacity change from 0 to 2097152 [ 1364.019435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1364.019442] Call Trace: [ 1364.019467] dump_stack+0x107/0x167 [ 1364.019497] should_fail.cold+0x5/0xa [ 1364.024728] __alloc_pages_nodemask+0x182/0x600 [ 1364.025740] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1364.027045] ? find_get_entry+0x2c8/0x740 [ 1364.027934] ? exc_page_fault+0xca/0x1a0 [ 1364.028802] ? trace_hardirqs_on+0x5b/0x180 [ 1364.029738] alloc_pages_current+0x187/0x280 [ 1364.030674] __page_cache_alloc+0x2d2/0x360 [ 1364.031611] pagecache_get_page+0x2c7/0xc80 [ 1364.032544] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1364.033641] grab_cache_page_write_begin+0x64/0xa0 [ 1364.034694] simple_write_begin+0x30/0x2e0 [ 1364.035596] generic_perform_write+0x20a/0x4f0 [ 1364.036577] ? __mnt_drop_write_file+0x9/0x70 [ 1364.037532] ? page_cache_prev_miss+0x310/0x310 [ 1364.038524] ? evict_inodes+0x470/0x470 [ 1364.039376] ? generic_write_checks+0x2ad/0x390 [ 1364.040379] __generic_file_write_iter+0x39d/0x5d0 [ 1364.041435] generic_file_write_iter+0xdb/0x230 [ 1364.042419] ? iov_iter_init+0x3c/0x130 [ 1364.043268] new_sync_write+0x42c/0x660 [ 1364.044135] ? new_sync_read+0x6f0/0x6f0 [ 1364.044988] ? __x64_sys_pwrite64+0x201/0x260 [ 1364.045969] ? lock_release+0x680/0x680 [ 1364.046815] ? avc_policy_seqno+0x9/0x70 [ 1364.047686] ? selinux_file_permission+0x92/0x520 [ 1364.048715] ? security_file_permission+0xb1/0xe0 [ 1364.049756] vfs_write+0x7c0/0xb10 [ 1364.050522] __x64_sys_pwrite64+0x201/0x260 [ 1364.051453] ? ksys_pwrite64+0x1b0/0x1b0 [ 1364.052327] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1364.053445] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1364.054541] do_syscall_64+0x33/0x40 [ 1364.055335] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1364.056427] RIP: 0033:0x7f3eb14f5b19 [ 1364.057231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1364.061148] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1364.062777] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1364.064294] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1364.065809] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1364.067322] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1364.068838] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1364.071967] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1364.074399] EXT4-fs (loop4): group descriptors corrupted! 05:49:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback}) 05:49:13 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:49:13 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:49:13 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffea, 0x0, 0x0, 0x0) 05:49:13 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xab580000, 0x0, 0x0, 0x0) 05:49:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x4dfff, 0x8001) 05:49:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010400)="020000", 0x3, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:49:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback}) [ 1364.281786] loop4: detected capacity change from 0 to 2097152 [ 1364.299744] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1364.301789] EXT4-fs (loop4): group descriptors corrupted! 05:49:13 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 72) 05:49:13 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:49:13 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:49:13 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x58ab, 0x0, 0x0) 05:49:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010400)="020000", 0x3, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:49:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback}) 05:49:13 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1364.435575] FAULT_INJECTION: forcing a failure. [ 1364.435575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.438382] CPU: 0 PID: 10934 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1364.439970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1364.441876] Call Trace: [ 1364.442488] dump_stack+0x107/0x167 [ 1364.443324] should_fail.cold+0x5/0xa [ 1364.444209] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1364.445447] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1364.446620] ? simple_write_begin+0x109/0x2e0 [ 1364.447647] generic_perform_write+0x279/0x4f0 [ 1364.448709] ? __mnt_drop_write_file+0x9/0x70 [ 1364.449759] ? page_cache_prev_miss+0x310/0x310 [ 1364.450829] ? evict_inodes+0x470/0x470 [ 1364.451752] ? generic_write_checks+0x2ad/0x390 [ 1364.452845] __generic_file_write_iter+0x39d/0x5d0 [ 1364.454004] generic_file_write_iter+0xdb/0x230 [ 1364.455079] ? iov_iter_init+0x3c/0x130 [ 1364.456004] new_sync_write+0x42c/0x660 [ 1364.456925] ? new_sync_read+0x6f0/0x6f0 [ 1364.457868] ? __x64_sys_pwrite64+0x201/0x260 [ 1364.458913] ? lock_release+0x680/0x680 [ 1364.459832] ? avc_policy_seqno+0x9/0x70 [ 1364.460765] ? selinux_file_permission+0x92/0x520 [ 1364.461898] ? security_file_permission+0xb1/0xe0 [ 1364.463015] vfs_write+0x7c0/0xb10 [ 1364.463842] __x64_sys_pwrite64+0x201/0x260 [ 1364.464842] ? ksys_pwrite64+0x1b0/0x1b0 [ 1364.465793] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1364.466999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1364.468201] do_syscall_64+0x33/0x40 [ 1364.469063] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1364.470257] RIP: 0033:0x7f3eb14f5b19 [ 1364.471110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1364.475298] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1364.477039] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1364.478697] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1364.480312] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1364.481962] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1364.483587] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1364.499166] loop4: detected capacity change from 0 to 2097152 [ 1364.521647] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1364.523762] EXT4-fs (loop4): group descriptors corrupted! 05:49:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 73) 05:49:28 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x80000, 0x0, 0x0, 0x0) 05:49:28 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xab58, 0x0, 0x0) 05:49:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010400)="020000", 0x3, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:49:28 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x4efff, 0x8001) 05:49:28 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:49:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 1) [ 1378.819782] FAULT_INJECTION: forcing a failure. [ 1378.819782] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:49:28 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1378.822616] CPU: 1 PID: 10964 Comm: syz-executor.3 Not tainted 5.10.253 #1 [ 1378.824301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1378.826071] Call Trace: [ 1378.826647] dump_stack+0x107/0x167 [ 1378.827428] should_fail.cold+0x5/0xa [ 1378.828254] _copy_from_user+0x2e/0x1b0 [ 1378.829110] inet6_ioctl+0x221/0x290 [ 1378.829915] ? inet6_release+0x70/0x70 [ 1378.830776] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1378.831665] loop4: detected capacity change from 0 to 2097152 [ 1378.831911] ? SOFTIRQ_verbose+0x10/0x10 [ 1378.834340] ? find_held_lock+0x2c/0x110 [ 1378.835216] sock_do_ioctl+0xd3/0x300 [ 1378.836033] ? compat_ifr_data_ioctl+0x180/0x180 [ 1378.837048] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1378.838275] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1378.839393] ? do_vfs_ioctl+0x283/0x10d0 [ 1378.840272] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1378.841406] ? generic_block_fiemap+0x60/0x60 [ 1378.842369] ? lock_downgrade+0x6d0/0x6d0 [ 1378.843269] sock_ioctl+0x3ef/0x710 [ 1378.844058] ? dlci_ioctl_set+0x30/0x30 [ 1378.844918] ? selinux_file_ioctl+0xb6/0x270 [ 1378.845874] ? dlci_ioctl_set+0x30/0x30 [ 1378.846426] FAULT_INJECTION: forcing a failure. [ 1378.846426] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1378.846735] __x64_sys_ioctl+0x19a/0x210 [ 1378.850652] do_syscall_64+0x33/0x40 [ 1378.851455] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1378.852543] RIP: 0033:0x7fea18aa6b19 [ 1378.853338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1378.857681] RSP: 002b:00007fea1601c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1378.859419] RAX: ffffffffffffffda RBX: 00007fea18bb9f60 RCX: 00007fea18aa6b19 [ 1378.861038] RDX: 00000000200000c0 RSI: 000000000000890b RDI: 0000000000000003 [ 1378.862660] RBP: 00007fea1601c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1378.864277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1378.865902] R13: 00007ffeffd7db5f R14: 00007fea1601c300 R15: 0000000000022000 [ 1378.867550] CPU: 0 PID: 10955 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1378.868364] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1378.869371] Call Trace: [ 1378.869679] dump_stack+0x107/0x167 [ 1378.870110] should_fail.cold+0x5/0xa [ 1378.870563] __alloc_pages_nodemask+0x182/0x600 [ 1378.871108] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1378.871808] ? find_get_entry+0x2c8/0x740 [ 1378.872295] ? exc_page_fault+0xca/0x1a0 [ 1378.872771] ? trace_hardirqs_on+0x5b/0x180 [ 1378.873289] alloc_pages_current+0x187/0x280 [ 1378.873803] __page_cache_alloc+0x2d2/0x360 [ 1378.874312] pagecache_get_page+0x2c7/0xc80 [ 1378.874836] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1378.875429] grab_cache_page_write_begin+0x64/0xa0 [ 1378.876019] simple_write_begin+0x30/0x2e0 [ 1378.876516] generic_perform_write+0x20a/0x4f0 [ 1378.877073] ? page_cache_prev_miss+0x310/0x310 [ 1378.877633] ? evict_inodes+0x470/0x470 [ 1378.878108] ? generic_write_checks+0x2ad/0x390 [ 1378.878667] __generic_file_write_iter+0x39d/0x5d0 [ 1378.879241] generic_file_write_iter+0xdb/0x230 [ 1378.879779] ? iov_iter_init+0x3c/0x130 [ 1378.880255] new_sync_write+0x42c/0x660 [ 1378.880719] ? new_sync_read+0x6f0/0x6f0 [ 1378.881192] ? __x64_sys_pwrite64+0x201/0x260 [ 1378.881741] ? lock_release+0x680/0x680 [ 1378.882207] ? avc_policy_seqno+0x9/0x70 [ 1378.882682] ? selinux_file_permission+0x92/0x520 [ 1378.883250] ? security_file_permission+0xb1/0xe0 [ 1378.883817] vfs_write+0x7c0/0xb10 [ 1378.884237] __x64_sys_pwrite64+0x201/0x260 [ 1378.884754] ? ksys_pwrite64+0x1b0/0x1b0 [ 1378.885245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1378.885895] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1378.886521] do_syscall_64+0x33/0x40 [ 1378.886974] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1378.887597] RIP: 0033:0x7f3eb14f5b19 [ 1378.888045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1378.890226] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1378.891113] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1378.891951] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1378.892779] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1378.893620] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1378.894447] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1378.900223] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1378.903038] EXT4-fs (loop4): group descriptors corrupted! 05:49:28 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:49:28 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xab580000, 0x0, 0x0) 05:49:28 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x200000, 0x0, 0x0, 0x0) 05:49:28 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 05:49:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 74) 05:49:28 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0) 05:49:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 2) 05:49:28 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xab58000000000000, 0x0, 0x0) [ 1379.036901] FAULT_INJECTION: forcing a failure. [ 1379.036901] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.038346] CPU: 0 PID: 10982 Comm: syz-executor.3 Not tainted 5.10.253 #1 [ 1379.039151] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1379.040111] Call Trace: [ 1379.040425] dump_stack+0x107/0x167 [ 1379.040858] should_fail.cold+0x5/0xa [ 1379.041326] ? fib6_info_alloc+0x3c/0x110 [ 1379.041816] should_failslab+0x5/0x20 [ 1379.042260] __kmalloc+0x72/0x390 [ 1379.042681] ? __mutex_lock+0x4fe/0x10b0 [ 1379.043163] fib6_info_alloc+0x3c/0x110 [ 1379.043653] ip6_route_info_create+0x379/0x1a10 [ 1379.044214] ? mutex_lock_io_nested+0xf30/0xf30 [ 1379.044762] ? fib6_nh_init+0x18d0/0x18d0 [ 1379.045262] ? cap_capable+0x1cd/0x230 [ 1379.045746] ip6_route_add+0x24/0x150 [ 1379.046204] ipv6_route_ioctl+0x39d/0x550 [ 1379.046713] ? rt6_purge_dflt_routers+0xfa0/0xfa0 [ 1379.047292] ? find_held_lock+0x2c/0x110 [ 1379.047789] ? _copy_from_user+0xfb/0x1b0 [ 1379.048288] inet6_ioctl+0x24f/0x290 [ 1379.048733] ? inet6_release+0x70/0x70 [ 1379.049203] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1379.049840] ? SOFTIRQ_verbose+0x10/0x10 [ 1379.050324] ? find_held_lock+0x2c/0x110 [ 1379.050812] sock_do_ioctl+0xd3/0x300 [ 1379.051266] ? compat_ifr_data_ioctl+0x180/0x180 [ 1379.051844] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1379.052521] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1379.053142] ? do_vfs_ioctl+0x283/0x10d0 [ 1379.053624] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1379.054236] ? generic_block_fiemap+0x60/0x60 [ 1379.054756] ? lock_downgrade+0x6d0/0x6d0 [ 1379.055245] sock_ioctl+0x3ef/0x710 [ 1379.055676] ? dlci_ioctl_set+0x30/0x30 [ 1379.056160] ? selinux_file_ioctl+0xb6/0x270 [ 1379.056692] ? dlci_ioctl_set+0x30/0x30 [ 1379.057164] __x64_sys_ioctl+0x19a/0x210 [ 1379.057667] do_syscall_64+0x33/0x40 [ 1379.058120] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1379.058724] RIP: 0033:0x7fea18aa6b19 [ 1379.059163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1379.061404] RSP: 002b:00007fea1601c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1379.062328] RAX: ffffffffffffffda RBX: 00007fea18bb9f60 RCX: 00007fea18aa6b19 [ 1379.063184] RDX: 00000000200000c0 RSI: 000000000000890b RDI: 0000000000000003 [ 1379.064021] RBP: 00007fea1601c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1379.064873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.065707] R13: 00007ffeffd7db5f R14: 00007fea1601c300 R15: 0000000000022000 05:49:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010400)="02000000", 0x4, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1379.090568] loop4: detected capacity change from 0 to 2097152 [ 1379.101163] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1379.102267] EXT4-fs (loop4): group descriptors corrupted! [ 1379.127978] FAULT_INJECTION: forcing a failure. [ 1379.127978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1379.130758] CPU: 1 PID: 10990 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1379.132293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1379.134172] Call Trace: [ 1379.134772] dump_stack+0x107/0x167 [ 1379.135601] should_fail.cold+0x5/0xa [ 1379.136492] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1379.137710] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1379.138886] ? simple_write_begin+0x109/0x2e0 [ 1379.139909] generic_perform_write+0x279/0x4f0 [ 1379.140935] ? __mnt_drop_write_file+0x9/0x70 [ 1379.141943] ? page_cache_prev_miss+0x310/0x310 [ 1379.142989] ? evict_inodes+0x470/0x470 [ 1379.143879] ? generic_write_checks+0x2ad/0x390 [ 1379.144935] __generic_file_write_iter+0x39d/0x5d0 [ 1379.146097] generic_file_write_iter+0xdb/0x230 [ 1379.147160] ? iov_iter_init+0x3c/0x130 [ 1379.148080] new_sync_write+0x42c/0x660 [ 1379.149007] ? new_sync_read+0x6f0/0x6f0 [ 1379.149956] ? __x64_sys_pwrite64+0x201/0x260 [ 1379.150985] ? lock_release+0x680/0x680 [ 1379.151872] ? avc_policy_seqno+0x9/0x70 [ 1379.152816] ? selinux_file_permission+0x92/0x520 [ 1379.153950] ? security_file_permission+0xb1/0xe0 [ 1379.155047] vfs_write+0x7c0/0xb10 [ 1379.155861] __x64_sys_pwrite64+0x201/0x260 [ 1379.156871] ? ksys_pwrite64+0x1b0/0x1b0 [ 1379.157796] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1379.159007] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1379.160210] do_syscall_64+0x33/0x40 [ 1379.161086] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1379.162306] RIP: 0033:0x7f3eb14f5b19 [ 1379.163171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1379.167337] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1379.169040] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1379.170613] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1379.172173] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1379.173848] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1379.175521] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:49:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 75) 05:49:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x4ffff, 0x8001) 05:49:46 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x58ab) 05:49:46 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) 05:49:46 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:49:46 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xf0ff7f, 0x0, 0x0, 0x0) 05:49:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 3) 05:49:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010400)="02000000", 0x4, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1397.158662] loop4: detected capacity change from 0 to 2097152 [ 1397.174697] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1397.176808] EXT4-fs (loop4): group descriptors corrupted! [ 1397.186869] FAULT_INJECTION: forcing a failure. [ 1397.186869] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1397.189706] CPU: 1 PID: 11000 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1397.191301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1397.193221] Call Trace: [ 1397.193841] dump_stack+0x107/0x167 [ 1397.194687] should_fail.cold+0x5/0xa [ 1397.195578] __alloc_pages_nodemask+0x182/0x600 [ 1397.196651] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1397.198035] ? find_get_entry+0x2c8/0x740 [ 1397.198976] ? exc_page_fault+0xca/0x1a0 [ 1397.199897] ? trace_hardirqs_on+0x5b/0x180 [ 1397.200130] FAULT_INJECTION: forcing a failure. [ 1397.200130] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.200884] alloc_pages_current+0x187/0x280 [ 1397.200911] __page_cache_alloc+0x2d2/0x360 [ 1397.200941] pagecache_get_page+0x2c7/0xc80 [ 1397.206248] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1397.207420] grab_cache_page_write_begin+0x64/0xa0 [ 1397.208532] simple_write_begin+0x30/0x2e0 [ 1397.209491] generic_perform_write+0x20a/0x4f0 [ 1397.210533] ? __mnt_drop_write_file+0x9/0x70 [ 1397.211534] ? page_cache_prev_miss+0x310/0x310 [ 1397.212574] ? evict_inodes+0x470/0x470 [ 1397.213476] ? generic_write_checks+0x2ad/0x390 [ 1397.214532] __generic_file_write_iter+0x39d/0x5d0 [ 1397.215638] generic_file_write_iter+0xdb/0x230 [ 1397.216675] ? iov_iter_init+0x3c/0x130 [ 1397.217590] new_sync_write+0x42c/0x660 [ 1397.218484] ? new_sync_read+0x6f0/0x6f0 [ 1397.219398] ? __x64_sys_pwrite64+0x201/0x260 [ 1397.220412] ? lock_release+0x680/0x680 [ 1397.221304] ? avc_policy_seqno+0x9/0x70 [ 1397.222223] ? selinux_file_permission+0x92/0x520 [ 1397.223309] ? security_file_permission+0xb1/0xe0 [ 1397.224389] vfs_write+0x7c0/0xb10 [ 1397.225184] __x64_sys_pwrite64+0x201/0x260 [ 1397.226152] ? ksys_pwrite64+0x1b0/0x1b0 [ 1397.227060] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1397.228223] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1397.229372] do_syscall_64+0x33/0x40 [ 1397.230207] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1397.231348] RIP: 0033:0x7f3eb14f5b19 [ 1397.232177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1397.236265] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1397.237957] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1397.239548] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1397.241138] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1397.242737] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1397.244328] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1397.245964] CPU: 0 PID: 11018 Comm: syz-executor.3 Not tainted 5.10.253 #1 [ 1397.247520] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1397.249373] Call Trace: [ 1397.249980] dump_stack+0x107/0x167 [ 1397.250796] should_fail.cold+0x5/0xa [ 1397.251647] ? create_object.isra.0+0x3a/0xa30 [ 1397.252663] should_failslab+0x5/0x20 [ 1397.253520] kmem_cache_alloc+0x5b/0x310 [ 1397.254431] create_object.isra.0+0x3a/0xa30 [ 1397.255407] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1397.256542] __kmalloc+0x16e/0x390 [ 1397.257343] fib6_info_alloc+0x3c/0x110 [ 1397.258234] ip6_route_info_create+0x379/0x1a10 [ 1397.259270] ? mutex_lock_io_nested+0xf30/0xf30 [ 1397.260316] ? fib6_nh_init+0x18d0/0x18d0 [ 1397.261237] ? cap_capable+0x1cd/0x230 [ 1397.262128] ip6_route_add+0x24/0x150 [ 1397.262979] ipv6_route_ioctl+0x39d/0x550 [ 1397.263912] ? rt6_purge_dflt_routers+0xfa0/0xfa0 [ 1397.264985] ? find_held_lock+0x2c/0x110 [ 1397.265933] ? _copy_from_user+0xfb/0x1b0 [ 1397.266858] inet6_ioctl+0x24f/0x290 [ 1397.267685] ? inet6_release+0x70/0x70 [ 1397.268567] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1397.269744] ? SOFTIRQ_verbose+0x10/0x10 [ 1397.270651] ? find_held_lock+0x2c/0x110 [ 1397.271561] sock_do_ioctl+0xd3/0x300 [ 1397.272409] ? compat_ifr_data_ioctl+0x180/0x180 [ 1397.273482] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1397.274763] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1397.275913] ? do_vfs_ioctl+0x283/0x10d0 [ 1397.276816] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1397.277987] ? generic_block_fiemap+0x60/0x60 [ 1397.278984] ? lock_downgrade+0x6d0/0x6d0 [ 1397.279914] sock_ioctl+0x3ef/0x710 [ 1397.280725] ? dlci_ioctl_set+0x30/0x30 [ 1397.281628] ? selinux_file_ioctl+0xb6/0x270 [ 1397.282611] ? dlci_ioctl_set+0x30/0x30 [ 1397.283498] __x64_sys_ioctl+0x19a/0x210 [ 1397.284406] do_syscall_64+0x33/0x40 05:49:46 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x1000000, 0x0, 0x0, 0x0) [ 1397.285234] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1397.286552] RIP: 0033:0x7fea18aa6b19 [ 1397.287373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1397.291441] RSP: 002b:00007fea1601c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1397.293121] RAX: ffffffffffffffda RBX: 00007fea18bb9f60 RCX: 00007fea18aa6b19 [ 1397.294705] RDX: 00000000200000c0 RSI: 000000000000890b RDI: 0000000000000003 [ 1397.296281] RBP: 00007fea1601c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1397.297863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1397.299435] R13: 00007ffeffd7db5f R14: 00007fea1601c300 R15: 0000000000022000 05:49:46 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:50:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 76) 05:50:01 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) [ 1412.666955] loop4: detected capacity change from 0 to 2097152 [ 1412.673146] FAULT_INJECTION: forcing a failure. [ 1412.673146] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.674831] CPU: 1 PID: 11037 Comm: syz-executor.3 Not tainted 5.10.253 #1 [ 1412.675788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.677137] Call Trace: [ 1412.677635] dump_stack+0x107/0x167 [ 1412.678239] should_fail.cold+0x5/0xa [ 1412.678902] ? create_object.isra.0+0x3a/0xa30 [ 1412.679557] should_failslab+0x5/0x20 [ 1412.680081] kmem_cache_alloc+0x5b/0x310 [ 1412.680641] create_object.isra.0+0x3a/0xa30 [ 1412.681254] kmemleak_alloc_percpu+0xa0/0x100 [ 1412.682053] pcpu_alloc+0x4e2/0x1240 [ 1412.682687] fib_nh_common_init+0x2d/0x160 [ 1412.683273] fib6_nh_init+0x76e/0x18d0 [ 1412.683830] ? icmp6_dst_alloc+0x660/0x660 [ 1412.684413] ? ip_fib_metrics_init+0x3ca/0x7d0 [ 1412.685077] ? gre_gro_receive+0x1740/0x1740 [ 1412.685806] ? kasan_unpoison_shadow+0x33/0x50 [ 1412.686494] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1412.687190] ip6_route_info_create+0x1199/0x1a10 [ 1412.687851] ? fib6_nh_init+0x18d0/0x18d0 [ 1412.688423] ? cap_capable+0x1cd/0x230 [ 1412.688967] ip6_route_add+0x24/0x150 [ 1412.689496] ipv6_route_ioctl+0x39d/0x550 [ 1412.690087] ? rt6_purge_dflt_routers+0xfa0/0xfa0 [ 1412.690962] ? find_held_lock+0x2c/0x110 [ 1412.691674] ? _copy_from_user+0xfb/0x1b0 [ 1412.692250] inet6_ioctl+0x24f/0x290 [ 1412.692772] ? inet6_release+0x70/0x70 [ 1412.693320] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1412.694048] ? SOFTIRQ_verbose+0x10/0x10 [ 1412.694606] ? find_held_lock+0x2c/0x110 [ 1412.695173] sock_do_ioctl+0xd3/0x300 [ 1412.695716] ? compat_ifr_data_ioctl+0x180/0x180 [ 1412.696370] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1412.697155] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1412.697881] ? do_vfs_ioctl+0x283/0x10d0 [ 1412.698446] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1412.699164] ? generic_block_fiemap+0x60/0x60 [ 1412.699794] ? lock_downgrade+0x6d0/0x6d0 [ 1412.700369] sock_ioctl+0x3ef/0x710 [ 1412.700867] ? dlci_ioctl_set+0x30/0x30 [ 1412.701426] ? selinux_file_ioctl+0xb6/0x270 [ 1412.702189] ? dlci_ioctl_set+0x30/0x30 [ 1412.702868] __x64_sys_ioctl+0x19a/0x210 [ 1412.703530] do_syscall_64+0x33/0x40 [ 1412.704146] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1412.705005] RIP: 0033:0x7fea18aa6b19 [ 1412.705545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.708620] RSP: 002b:00007fea1601c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1412.709835] RAX: ffffffffffffffda RBX: 00007fea18bb9f60 RCX: 00007fea18aa6b19 [ 1412.710808] RDX: 00000000200000c0 RSI: 000000000000890b RDI: 0000000000000003 [ 1412.712124] RBP: 00007fea1601c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1412.713100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.714085] R13: 00007ffeffd7db5f R14: 00007fea1601c300 R15: 0000000000022000 05:50:01 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000000, 0x0, 0x0, 0x0) 05:50:01 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xab58) 05:50:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010400)="02000000", 0x4, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:50:01 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x50fff, 0x8001) 05:50:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 4) 05:50:01 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:50:02 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback}) [ 1412.782629] FAULT_INJECTION: forcing a failure. [ 1412.782629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1412.784499] CPU: 1 PID: 11043 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1412.785440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.786576] Call Trace: [ 1412.786940] dump_stack+0x107/0x167 [ 1412.787439] should_fail.cold+0x5/0xa [ 1412.787961] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1412.788835] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1412.789529] ? simple_write_begin+0x109/0x2e0 [ 1412.790152] generic_perform_write+0x279/0x4f0 [ 1412.790786] ? __mnt_drop_write_file+0x9/0x70 [ 1412.791397] ? page_cache_prev_miss+0x310/0x310 [ 1412.792028] ? evict_inodes+0x470/0x470 [ 1412.792576] ? generic_write_checks+0x2ad/0x390 [ 1412.793214] __generic_file_write_iter+0x39d/0x5d0 [ 1412.793891] generic_file_write_iter+0xdb/0x230 [ 1412.794530] ? iov_iter_init+0x3c/0x130 [ 1412.795074] new_sync_write+0x42c/0x660 [ 1412.795619] ? new_sync_read+0x6f0/0x6f0 [ 1412.796168] ? __x64_sys_pwrite64+0x201/0x260 [ 1412.796797] ? lock_release+0x680/0x680 [ 1412.797339] ? avc_policy_seqno+0x9/0x70 [ 1412.797905] ? selinux_file_permission+0x92/0x520 [ 1412.798563] ? security_file_permission+0xb1/0xe0 [ 1412.799224] vfs_write+0x7c0/0xb10 [ 1412.799715] __x64_sys_pwrite64+0x201/0x260 [ 1412.800297] ? ksys_pwrite64+0x1b0/0x1b0 [ 1412.800853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1412.801582] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1412.802310] do_syscall_64+0x33/0x40 [ 1412.802805] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1412.803499] RIP: 0033:0x7f3eb14f5b19 [ 1412.803995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.806488] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1412.807517] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1412.808481] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1412.809439] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1412.810399] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1412.811365] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:50:02 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1412.845746] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1412.847071] EXT4-fs (loop4): group descriptors corrupted! 05:50:02 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 5) 05:50:02 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xab580000) 05:50:02 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 05:50:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010400)="0200000001", 0x5}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:50:02 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback}) [ 1412.950386] FAULT_INJECTION: forcing a failure. [ 1412.950386] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.952888] CPU: 0 PID: 11062 Comm: syz-executor.3 Not tainted 5.10.253 #1 [ 1412.954393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.956140] Call Trace: [ 1412.956720] dump_stack+0x107/0x167 [ 1412.957513] should_fail.cold+0x5/0xa 05:50:02 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xab58000000000000) [ 1412.958346] ? create_object.isra.0+0x3a/0xa30 [ 1412.959431] should_failslab+0x5/0x20 [ 1412.960243] kmem_cache_alloc+0x5b/0x310 [ 1412.961088] ? mark_held_locks+0x9e/0xe0 [ 1412.961970] create_object.isra.0+0x3a/0xa30 [ 1412.962895] kmemleak_alloc_percpu+0xa0/0x100 [ 1412.963833] pcpu_alloc+0x4e2/0x1240 [ 1412.964644] fib_nh_common_init+0x2d/0x160 [ 1412.965561] fib6_nh_init+0x76e/0x18d0 [ 1412.966393] ? icmp6_dst_alloc+0x660/0x660 [ 1412.967289] ? ip_fib_metrics_init+0x3ca/0x7d0 [ 1412.968256] ? gre_gro_receive+0x1740/0x1740 [ 1412.969180] ? kasan_unpoison_shadow+0x33/0x50 [ 1412.970146] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1412.971235] ip6_route_info_create+0x1199/0x1a10 [ 1412.972240] ? fib6_nh_init+0x18d0/0x18d0 [ 1412.973139] ? cap_capable+0x1cd/0x230 [ 1412.974005] ip6_route_add+0x24/0x150 [ 1412.974803] ipv6_route_ioctl+0x39d/0x550 [ 1412.975682] ? rt6_purge_dflt_routers+0xfa0/0xfa0 [ 1412.976696] ? find_held_lock+0x2c/0x110 [ 1412.977590] ? _copy_from_user+0xfb/0x1b0 [ 1412.978466] inet6_ioctl+0x24f/0x290 [ 1412.979249] ? inet6_release+0x70/0x70 [ 1412.980086] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1412.981182] ? SOFTIRQ_verbose+0x10/0x10 [ 1412.982049] ? find_held_lock+0x2c/0x110 [ 1412.982909] sock_do_ioctl+0xd3/0x300 [ 1412.983713] ? compat_ifr_data_ioctl+0x180/0x180 [ 1412.984746] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1412.985959] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1412.987051] ? do_vfs_ioctl+0x283/0x10d0 [ 1412.987908] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1412.989006] ? generic_block_fiemap+0x60/0x60 [ 1412.989951] ? lock_downgrade+0x6d0/0x6d0 [ 1412.990825] sock_ioctl+0x3ef/0x710 [ 1412.991587] ? dlci_ioctl_set+0x30/0x30 [ 1412.992432] ? selinux_file_ioctl+0xb6/0x270 [ 1412.993362] ? dlci_ioctl_set+0x30/0x30 [ 1412.994212] __x64_sys_ioctl+0x19a/0x210 [ 1412.995080] do_syscall_64+0x33/0x40 [ 1412.995857] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1412.996933] RIP: 0033:0x7fea18aa6b19 [ 1412.997722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1413.001581] RSP: 002b:00007fea1601c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1413.003206] RAX: ffffffffffffffda RBX: 00007fea18bb9f60 RCX: 00007fea18aa6b19 [ 1413.004714] RDX: 00000000200000c0 RSI: 000000000000890b RDI: 0000000000000003 [ 1413.006238] RBP: 00007fea1601c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1413.007738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1413.009232] R13: 00007ffeffd7db5f R14: 00007fea1601c300 R15: 0000000000022000 05:50:15 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:50:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 77) 05:50:15 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x7ffff000, 0x0, 0x0, 0x0) 05:50:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010400)="0200000001", 0x5}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:50:15 executing program 2: r0 = shmget(0x0, 0x3000, 0x200, &(0x7f0000ffb000/0x3000)=nil) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000140), &(0x7f00000001c0)) r2 = gettid() r3 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r3, &(0x7f0000000140)="b2", 0x20000141, 0x8001) clone3(&(0x7f000000c040)={0x140941000, &(0x7f0000000200), &(0x7f0000005840), 0x0, {}, &(0x7f00000058c0)=""/76, 0x4c, &(0x7f0000000480)=""/165, &(0x7f0000008300), 0x0, {r3}}, 0x58) r4 = gettid() clone3(&(0x7f000000c040)={0x140941000, &(0x7f0000005800), &(0x7f0000005840), 0x0, {}, &(0x7f00000058c0)=""/76, 0x4c, &(0x7f0000005940)=""/157, &(0x7f0000008300)=[0x0, 0x0, r4, 0x0, 0x0], 0x5}, 0x58) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{0x3, r1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x90, 0x5}, 0x2, 0xeb, 0x80000001, 0x401, r2, r4, 0x91dc}) r5 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0xfffffffd, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x3d}}, './file0/file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r5, &(0x7f0000000080)={0x10}) 05:50:15 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x51fff, 0x8001) 05:50:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback}) 05:50:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 6) [ 1425.883707] loop4: detected capacity change from 0 to 2097152 [ 1425.896894] FAULT_INJECTION: forcing a failure. [ 1425.896894] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.899410] CPU: 0 PID: 11086 Comm: syz-executor.3 Not tainted 5.10.253 #1 [ 1425.900910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1425.902712] Call Trace: [ 1425.903290] dump_stack+0x107/0x167 [ 1425.904088] should_fail.cold+0x5/0xa [ 1425.904916] ? create_object.isra.0+0x3a/0xa30 [ 1425.905916] should_failslab+0x5/0x20 [ 1425.906746] kmem_cache_alloc+0x5b/0x310 [ 1425.907636] create_object.isra.0+0x3a/0xa30 [ 1425.908600] kmemleak_alloc_percpu+0xa0/0x100 [ 1425.909581] pcpu_alloc+0x4e2/0x1240 [ 1425.910422] fib6_nh_init+0x79e/0x18d0 [ 1425.911279] ? icmp6_dst_alloc+0x660/0x660 [ 1425.912202] ? ip_fib_metrics_init+0x3ca/0x7d0 [ 1425.913207] ? gre_gro_receive+0x1740/0x1740 [ 1425.914171] ? kasan_unpoison_shadow+0x33/0x50 [ 1425.915163] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1425.916282] ip6_route_info_create+0x1199/0x1a10 [ 1425.917324] ? fib6_nh_init+0x18d0/0x18d0 [ 1425.918231] ? cap_capable+0x1cd/0x230 [ 1425.919096] ip6_route_add+0x24/0x150 [ 1425.919929] ipv6_route_ioctl+0x39d/0x550 [ 1425.920842] ? rt6_purge_dflt_routers+0xfa0/0xfa0 [ 1425.921901] ? find_held_lock+0x2c/0x110 [ 1425.922824] ? _copy_from_user+0xfb/0x1b0 [ 1425.923728] inet6_ioctl+0x24f/0x290 [ 1425.924536] ? inet6_release+0x70/0x70 [ 1425.925398] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1425.926545] ? SOFTIRQ_verbose+0x10/0x10 [ 1425.927427] ? find_held_lock+0x2c/0x110 [ 1425.928320] sock_do_ioctl+0xd3/0x300 [ 1425.929156] ? compat_ifr_data_ioctl+0x180/0x180 [ 1425.930201] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1425.931450] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1425.932576] ? do_vfs_ioctl+0x283/0x10d0 [ 1425.933457] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1425.934598] ? generic_block_fiemap+0x60/0x60 [ 1425.935575] ? lock_downgrade+0x6d0/0x6d0 [ 1425.936485] sock_ioctl+0x3ef/0x710 [ 1425.937276] ? dlci_ioctl_set+0x30/0x30 [ 1425.938153] ? selinux_file_ioctl+0xb6/0x270 [ 1425.939112] ? dlci_ioctl_set+0x30/0x30 [ 1425.939985] __x64_sys_ioctl+0x19a/0x210 [ 1425.940870] do_syscall_64+0x33/0x40 [ 1425.941342] FAULT_INJECTION: forcing a failure. [ 1425.941342] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1425.941684] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1425.941706] RIP: 0033:0x7fea18aa6b19 [ 1425.946123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1425.950131] RSP: 002b:00007fea1601c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1425.951776] RAX: ffffffffffffffda RBX: 00007fea18bb9f60 RCX: 00007fea18aa6b19 [ 1425.953321] RDX: 00000000200000c0 RSI: 000000000000890b RDI: 0000000000000003 [ 1425.954880] RBP: 00007fea1601c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1425.956416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1425.957978] R13: 00007ffeffd7db5f R14: 00007fea1601c300 R15: 0000000000022000 [ 1425.959555] CPU: 1 PID: 11089 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1425.961032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1425.962810] Call Trace: [ 1425.963379] dump_stack+0x107/0x167 [ 1425.964160] should_fail.cold+0x5/0xa [ 1425.964983] __alloc_pages_nodemask+0x182/0x600 [ 1425.965990] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1425.967279] ? find_get_entry+0x2c8/0x740 [ 1425.968163] ? exc_page_fault+0xca/0x1a0 [ 1425.969026] ? trace_hardirqs_on+0x5b/0x180 [ 1425.969972] alloc_pages_current+0x187/0x280 [ 1425.970929] __page_cache_alloc+0x2d2/0x360 [ 1425.971860] pagecache_get_page+0x2c7/0xc80 [ 1425.972789] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1425.973887] grab_cache_page_write_begin+0x64/0xa0 [ 1425.974940] simple_write_begin+0x30/0x2e0 [ 1425.975846] generic_perform_write+0x20a/0x4f0 [ 1425.976829] ? __mnt_drop_write_file+0x9/0x70 [ 1425.977793] ? page_cache_prev_miss+0x310/0x310 [ 1425.978795] ? evict_inodes+0x470/0x470 [ 1425.979641] ? generic_write_checks+0x2ad/0x390 [ 1425.980633] __generic_file_write_iter+0x39d/0x5d0 [ 1425.981681] generic_file_write_iter+0xdb/0x230 [ 1425.982685] ? iov_iter_init+0x3c/0x130 [ 1425.983536] new_sync_write+0x42c/0x660 [ 1425.984378] ? new_sync_read+0x6f0/0x6f0 [ 1425.985239] ? __x64_sys_pwrite64+0x201/0x260 [ 1425.986203] ? lock_release+0x680/0x680 [ 1425.987049] ? avc_policy_seqno+0x9/0x70 [ 1425.987907] ? selinux_file_permission+0x92/0x520 [ 1425.988938] ? security_file_permission+0xb1/0xe0 [ 1425.989969] vfs_write+0x7c0/0xb10 [ 1425.990728] __x64_sys_pwrite64+0x201/0x260 [ 1425.991640] ? ksys_pwrite64+0x1b0/0x1b0 [ 1425.992506] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1425.993615] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1425.994724] do_syscall_64+0x33/0x40 [ 1425.995511] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1425.996596] RIP: 0033:0x7f3eb14f5b19 [ 1425.997390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1426.001267] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1426.002883] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1426.004384] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1426.005900] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1426.007404] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1426.008917] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1426.016082] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1426.018071] EXT4-fs (loop4): group descriptors corrupted! 05:50:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 7) [ 1426.069073] FAULT_INJECTION: forcing a failure. [ 1426.069073] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.071546] CPU: 0 PID: 11096 Comm: syz-executor.3 Not tainted 5.10.253 #1 [ 1426.073046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1426.074848] Call Trace: [ 1426.075424] dump_stack+0x107/0x167 [ 1426.076223] should_fail.cold+0x5/0xa [ 1426.077054] ? create_object.isra.0+0x3a/0xa30 [ 1426.078057] should_failslab+0x5/0x20 [ 1426.078884] kmem_cache_alloc+0x5b/0x310 [ 1426.079768] ? mark_held_locks+0x9e/0xe0 [ 1426.080655] create_object.isra.0+0x3a/0xa30 [ 1426.081613] kmemleak_alloc_percpu+0xa0/0x100 [ 1426.082599] pcpu_alloc+0x4e2/0x1240 [ 1426.083426] fib6_nh_init+0x79e/0x18d0 [ 1426.084279] ? icmp6_dst_alloc+0x660/0x660 [ 1426.085218] ? ip_fib_metrics_init+0x3ca/0x7d0 [ 1426.086251] ? gre_gro_receive+0x1740/0x1740 [ 1426.087233] ? kasan_unpoison_shadow+0x33/0x50 [ 1426.088249] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1426.089392] ip6_route_info_create+0x1199/0x1a10 [ 1426.090467] ? fib6_nh_init+0x18d0/0x18d0 [ 1426.091386] ? cap_capable+0x1cd/0x230 [ 1426.092265] ip6_route_add+0x24/0x150 [ 1426.093111] ipv6_route_ioctl+0x39d/0x550 [ 1426.094054] ? rt6_purge_dflt_routers+0xfa0/0xfa0 [ 1426.095124] ? find_held_lock+0x2c/0x110 [ 1426.096066] ? _copy_from_user+0xfb/0x1b0 [ 1426.096992] inet6_ioctl+0x24f/0x290 [ 1426.097828] ? inet6_release+0x70/0x70 [ 1426.098709] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1426.099878] ? SOFTIRQ_verbose+0x10/0x10 [ 1426.100783] ? find_held_lock+0x2c/0x110 [ 1426.101698] sock_do_ioctl+0xd3/0x300 [ 1426.102558] ? compat_ifr_data_ioctl+0x180/0x180 [ 1426.103621] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1426.104901] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1426.106055] ? do_vfs_ioctl+0x283/0x10d0 [ 1426.106961] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1426.108132] ? generic_block_fiemap+0x60/0x60 [ 1426.109132] ? lock_downgrade+0x6d0/0x6d0 [ 1426.110076] sock_ioctl+0x3ef/0x710 [ 1426.110891] ? dlci_ioctl_set+0x30/0x30 [ 1426.111786] ? selinux_file_ioctl+0xb6/0x270 [ 1426.112769] ? dlci_ioctl_set+0x30/0x30 [ 1426.113661] __x64_sys_ioctl+0x19a/0x210 [ 1426.114577] do_syscall_64+0x33/0x40 [ 1426.115408] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1426.116554] RIP: 0033:0x7fea18aa6b19 [ 1426.117384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1426.121499] RSP: 002b:00007fea1601c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1426.123203] RAX: ffffffffffffffda RBX: 00007fea18bb9f60 RCX: 00007fea18aa6b19 [ 1426.124795] RDX: 00000000200000c0 RSI: 000000000000890b RDI: 0000000000000003 [ 1426.126392] RBP: 00007fea1601c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1426.127983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.129575] R13: 00007ffeffd7db5f R14: 00007fea1601c300 R15: 0000000000022000 05:50:15 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xeaffffff, 0x0, 0x0, 0x0) 05:50:15 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x52fff, 0x8001) 05:50:15 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:50:15 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 78) 05:50:15 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000005900000000000000", 0x40, 0x540}, {&(0x7f0000010400)="0200000001", 0x5}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1426.246695] FAULT_INJECTION: forcing a failure. [ 1426.246695] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1426.249365] CPU: 0 PID: 11103 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1426.250876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1426.252656] Call Trace: [ 1426.253223] dump_stack+0x107/0x167 [ 1426.254018] should_fail.cold+0x5/0xa [ 1426.254848] __alloc_pages_nodemask+0x182/0x600 [ 1426.255859] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1426.257158] ? find_get_entry+0x2c8/0x740 05:50:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 1) [ 1426.258066] ? exc_page_fault+0xca/0x1a0 [ 1426.259055] ? trace_hardirqs_on+0x5b/0x180 [ 1426.259997] alloc_pages_current+0x187/0x280 [ 1426.260958] __page_cache_alloc+0x2d2/0x360 [ 1426.261918] pagecache_get_page+0x2c7/0xc80 [ 1426.262852] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1426.263955] grab_cache_page_write_begin+0x64/0xa0 [ 1426.265017] simple_write_begin+0x30/0x2e0 [ 1426.265949] generic_perform_write+0x20a/0x4f0 [ 1426.266945] ? __mnt_drop_write_file+0x9/0x70 [ 1426.267920] ? page_cache_prev_miss+0x310/0x310 [ 1426.268932] ? evict_inodes+0x470/0x470 [ 1426.269812] ? generic_write_checks+0x2ad/0x390 [ 1426.270823] __generic_file_write_iter+0x39d/0x5d0 [ 1426.271897] generic_file_write_iter+0xdb/0x230 [ 1426.272907] ? iov_iter_init+0x3c/0x130 [ 1426.273790] new_sync_write+0x42c/0x660 [ 1426.274651] ? new_sync_read+0x6f0/0x6f0 [ 1426.275006] FAULT_INJECTION: forcing a failure. [ 1426.275006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1426.275531] ? __x64_sys_pwrite64+0x201/0x260 [ 1426.275557] ? lock_release+0x680/0x680 [ 1426.275576] ? avc_policy_seqno+0x9/0x70 [ 1426.275595] ? selinux_file_permission+0x92/0x520 [ 1426.275622] ? security_file_permission+0xb1/0xe0 [ 1426.282719] vfs_write+0x7c0/0xb10 [ 1426.283490] __x64_sys_pwrite64+0x201/0x260 [ 1426.284416] ? ksys_pwrite64+0x1b0/0x1b0 [ 1426.285291] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1426.286427] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1426.287542] do_syscall_64+0x33/0x40 [ 1426.288343] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1426.289446] RIP: 0033:0x7f3eb14f5b19 [ 1426.290258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1426.294204] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1426.295844] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1426.297376] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1426.298901] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1426.300409] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1426.301946] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1426.303529] CPU: 1 PID: 11109 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1426.305037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1426.306867] Call Trace: [ 1426.307427] dump_stack+0x107/0x167 [ 1426.308200] should_fail.cold+0x5/0xa [ 1426.309015] _copy_from_user+0x2e/0x1b0 [ 1426.309879] inet6_ioctl+0x221/0x290 [ 1426.310661] ? inet6_release+0x70/0x70 [ 1426.311514] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1426.312628] ? SOFTIRQ_verbose+0x10/0x10 [ 1426.313477] ? find_held_lock+0x2c/0x110 [ 1426.314350] sock_do_ioctl+0xd3/0x300 [ 1426.315152] ? compat_ifr_data_ioctl+0x180/0x180 [ 1426.316148] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1426.317353] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1426.318444] ? do_vfs_ioctl+0x283/0x10d0 [ 1426.319294] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1426.320395] ? generic_block_fiemap+0x60/0x60 [ 1426.321334] ? lock_downgrade+0x6d0/0x6d0 [ 1426.322229] sock_ioctl+0x3ef/0x710 [ 1426.322995] ? dlci_ioctl_set+0x30/0x30 [ 1426.323842] ? selinux_file_ioctl+0xb6/0x270 [ 1426.324777] ? dlci_ioctl_set+0x30/0x30 [ 1426.325608] __x64_sys_ioctl+0x19a/0x210 [ 1426.326471] do_syscall_64+0x33/0x40 [ 1426.327252] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1426.328342] RIP: 0033:0x7f5fe80fdb19 [ 1426.329127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1426.332985] RSP: 002b:00007f5fe5673188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1426.334587] RAX: ffffffffffffffda RBX: 00007f5fe8210f60 RCX: 00007f5fe80fdb19 [ 1426.336082] RDX: 00000000200000c0 RSI: 000000000000890b RDI: 0000000000000003 [ 1426.337572] RBP: 00007f5fe56731d0 R08: 0000000000000000 R09: 0000000000000000 [ 1426.339078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.340566] R13: 00007ffe619feb5f R14: 00007f5fe5673300 R15: 0000000000022000 05:50:15 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x53fff, 0x8001) 05:50:15 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1441.951884] FAULT_INJECTION: forcing a failure. [ 1441.951884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.953903] CPU: 1 PID: 11125 Comm: syz-executor.3 Not tainted 5.10.253 #1 [ 1441.954881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1441.956059] Call Trace: [ 1441.956433] dump_stack+0x107/0x167 [ 1441.956945] should_fail.cold+0x5/0xa [ 1441.957482] _copy_to_user+0x2e/0x180 [ 1441.958042] simple_read_from_buffer+0xcc/0x160 [ 1441.958060] FAULT_INJECTION: forcing a failure. [ 1441.958060] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.960235] proc_fail_nth_read+0x198/0x230 [ 1441.960846] ? proc_sessionid_read+0x230/0x230 [ 1441.961497] ? security_file_permission+0xb1/0xe0 [ 1441.962188] ? proc_sessionid_read+0x230/0x230 [ 1441.962820] vfs_read+0x228/0x620 [ 1441.963306] ksys_read+0x12d/0x260 [ 1441.963799] ? vfs_write+0xb10/0xb10 [ 1441.964325] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1441.965062] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1441.965797] do_syscall_64+0x33/0x40 [ 1441.966326] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1441.967037] RIP: 0033:0x7fea18a5969c [ 1441.967564] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1441.970138] RSP: 002b:00007fea1601c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1441.971188] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fea18a5969c [ 1441.972192] RDX: 000000000000000f RSI: 00007fea1601c1e0 RDI: 0000000000000004 [ 1441.973180] RBP: 00007fea1601c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1441.974197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.975192] R13: 00007ffeffd7db5f R14: 00007fea1601c300 R15: 0000000000022000 [ 1441.976246] CPU: 0 PID: 11131 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1441.978019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1441.980094] Call Trace: [ 1441.980756] dump_stack+0x107/0x167 [ 1441.981662] should_fail.cold+0x5/0xa [ 1441.982632] ? fib6_info_alloc+0x3c/0x110 [ 1441.983670] should_failslab+0x5/0x20 [ 1441.984632] __kmalloc+0x72/0x390 [ 1441.985498] ? __mutex_lock+0x4fe/0x10b0 [ 1441.986529] fib6_info_alloc+0x3c/0x110 [ 1441.987518] ip6_route_info_create+0x379/0x1a10 [ 1441.988670] ? mutex_lock_io_nested+0xf30/0xf30 [ 1441.989845] ? fib6_nh_init+0x18d0/0x18d0 [ 1441.990895] ? cap_capable+0x1cd/0x230 [ 1441.991892] ip6_route_add+0x24/0x150 [ 1441.992849] ipv6_route_ioctl+0x39d/0x550 [ 1441.994145] ? rt6_purge_dflt_routers+0xfa0/0xfa0 [ 1441.995350] ? find_held_lock+0x2c/0x110 [ 1441.996421] ? _copy_from_user+0xfb/0x1b0 [ 1441.997452] inet6_ioctl+0x24f/0x290 [ 1441.998382] ? inet6_release+0x70/0x70 [ 1441.999361] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1442.000657] ? SOFTIRQ_verbose+0x10/0x10 [ 1442.001655] ? find_held_lock+0x2c/0x110 [ 1442.002685] sock_do_ioctl+0xd3/0x300 [ 1442.003628] ? compat_ifr_data_ioctl+0x180/0x180 [ 1442.004805] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1442.006231] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1442.007520] ? do_vfs_ioctl+0x283/0x10d0 [ 1442.008530] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1442.009827] ? generic_block_fiemap+0x60/0x60 [ 1442.010945] ? lock_downgrade+0x6d0/0x6d0 [ 1442.011980] sock_ioctl+0x3ef/0x710 [ 1442.012881] ? dlci_ioctl_set+0x30/0x30 [ 1442.013876] ? selinux_file_ioctl+0xb6/0x270 [ 1442.014992] ? dlci_ioctl_set+0x30/0x30 [ 1442.015980] __x64_sys_ioctl+0x19a/0x210 [ 1442.016993] do_syscall_64+0x33/0x40 [ 1442.017920] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1442.019208] RIP: 0033:0x7f5fe80fdb19 [ 1442.020121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1442.024675] RSP: 002b:00007f5fe5673188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1442.026550] RAX: ffffffffffffffda RBX: 00007f5fe8210f60 RCX: 00007f5fe80fdb19 [ 1442.028312] RDX: 00000000200000c0 RSI: 000000000000890b RDI: 0000000000000003 [ 1442.030076] RBP: 00007f5fe56731d0 R08: 0000000000000000 R09: 0000000000000000 [ 1442.031835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1442.033592] R13: 00007ffe619feb5f R14: 00007f5fe5673300 R15: 0000000000022000 05:50:31 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r3 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r5, &(0x7f0000000280)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000340)="29c4f807aba8eee6440ad97489765d262db596c9d095b75300aef9fc94dcc5ba100ef85c003b05da1a42fc6490cdeb21cee6f8bf53b1c8cdc0d4f4f4c925b62a1038696cbd12793d4f99dfe5eeeffb75c3cab46c8ec5edf12932c406eff5416753f46af3bbb397c12bc6dfeaa0b03ddf2bf74fa3975481e194d637feface1a45b3679a9d475c484d740bbbc12e5309ce601c5eb1c372c1b6", 0x98}, {&(0x7f0000000400)="1c785481dcc531b7609c5835becf6f19f918407c7a6853419cfd22f6d938714b6289cc8b481e789df451179b70b7e3e511d7ebe06e03e1daaeb172e30f7905074eb15ba8d64b36095907ebe608202484f9324cf77fb76deca0e1a9424b9bb476ade1c6e46a7c8114e65e2c08407c0d1b5cb8a0f936ed8cbe4c8b361d0440a8bef584ba2fb4bc64430db5e3b183a9ca8ef80ea395e151737492029a5783fda1d94f6378b7fbe8f5853e9c30b1ebc3c14aefa53b851128971970d2676d56be927b7d29814b58e823b75ae8e18b9aac5d438ef5c029d881d8e3ffa88073adeac2994e12b27193fcc0d2391c", 0xea}, {&(0x7f0000000140)="89a88f3a091a1abf", 0x8}, {&(0x7f0000000500)="359836314ff2fc3afd11e22b37f8855bca84da40a5ba45827512e279f9e0c4953a6c5d9057e57e5acd645f9e17a179c6642faeecd1002ed05c589813c65772606f8ba4e60378ce94c86bd2918787b479b7a37c8d83d81f002cc252489ffb415fe4394fe1a6c55f19c31e3e33fb2cd34d8ff581e9f81c1898f16936f0df6363b6d4a8d14c7eb77fa3726e2c142009e2d0b57a73bbe088c7f7dcaec99a2c9fe28b07d241d0745e05bf8b983dd0d37a05f8cd5a", 0xb2}], 0x4, &(0x7f0000000680)=[{0xb8, 0x119, 0xfff, "6b7c3cb9a9e4fb7d5affd3aed6209ec519c14eb160970605f387a7790d7eed87efa0358c49a659d76abb7b3ae77935e43bae5b8df0e727291cfdd33f7af57f26eae48a0ddc7d9c5960bf452bf732976f47127380e8d2e228ec0c57ee01acf1e99072cb69d87e4b716b5349cdee4bb750ed031fbb1ec568fa7da13fc90ff11c5db8b18f81a7382dcb2b72ddc62df210a7ccd4f25b0e338fc21c75a1f2a4e6653d2a6432ef28"}, {0xc8, 0x30, 0x0, "eb5a2269677b21bdf47e0e58015807ec444204629d907b5e4e9a1701e39182275d8335e59016a938579fe662a83c93f3b949f199e3fff1d890bc884067a5d9779c0d3b23a483e267314924902c8869d174bcb8c6c440b41d5335c13a946d2afb37c58e5a1e8c8bbf233b64de508ca26ba123df57d79e677b009dcdad5c0c377e9231592fc9368aa2d3f8bc34ff331c569ccf4dce276d4294e5d16dc210a36ad7b5693213644f0ba938643f12b807daca1c"}, {0x60, 0x102, 0x196, "60d161b10a7eb7137aacef353c8ae12a381a05b91929377236e64631a6f1e027a8ddfd24e4574931a0a447ac9977ffb1ea176b0aec35ab384d5bfa3d0fd166ed0e58cdc6f43070acbd92"}, {0x50, 0x11, 0xd28, "c4d3b9d0bad681b871e4abd247bad3f665fc4eefd522cb7b9b34feb5e15b54e6bdd8fb80f79a27c18d75e2d55f0e50b3a61d300b8ce95c8df79b"}, {0x68, 0x10e, 0x2, "11ad884601313b1ef273386a37aee031733fa30a4ae79eb7184e5651fb3b54594fdb476a575fe33c1682e4166237a54cd318d2a62966fa1e015f2f306b836a4ae2105f3fa59f9893557831caa4c7416893a78e61d6bc2b26"}, {0xd0, 0x103, 0xfffffffe, "ff40f67a00a9561e20f377fcadd01444dcb6850e2defa1f1a5e12f78802fb0310908141ca4129696c690d3f62b7129d889506fbb517d0db639711eadfc36ae4668e8425ce3d4e26b811da4a1a4c82b5a89b6db127888e5b9986a2a5ed26bc24c30738b51891f64937e06ef469797e8c9915f3db89d2d56ee62b88271f0e17a0930b8c69931a50a1d8f5f3e1c2a8ec74ecabccae4f08675eda8e5aab9eaa6db57ccd8a886b684fe92cfdd53e1976769aee04ded767d235411c9e595fd7b48"}], 0x368}, 0x0, 0x1, 0x1}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000040), 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:50:31 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:50:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 8) 05:50:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:50:31 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 2) 05:50:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 79) 05:50:31 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x54fff, 0x8001) 05:50:31 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffffea, 0x0, 0x0, 0x0) [ 1442.045736] loop4: detected capacity change from 0 to 2097152 05:50:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:50:31 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xffffffff, 0x0, 0x0, 0x0) [ 1442.081539] FAULT_INJECTION: forcing a failure. [ 1442.081539] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1442.084474] CPU: 0 PID: 11132 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1442.086162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1442.088159] Call Trace: [ 1442.088799] dump_stack+0x107/0x167 [ 1442.089671] should_fail.cold+0x5/0xa [ 1442.090615] __alloc_pages_nodemask+0x182/0x600 [ 1442.091743] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1442.093184] ? find_get_entry+0x2c8/0x740 [ 1442.094184] ? exc_page_fault+0xca/0x1a0 [ 1442.095144] ? trace_hardirqs_on+0x5b/0x180 [ 1442.096197] alloc_pages_current+0x187/0x280 [ 1442.097262] __page_cache_alloc+0x2d2/0x360 [ 1442.098313] pagecache_get_page+0x2c7/0xc80 [ 1442.099364] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1442.100606] grab_cache_page_write_begin+0x64/0xa0 [ 1442.101782] simple_write_begin+0x30/0x2e0 [ 1442.102808] generic_perform_write+0x20a/0x4f0 [ 1442.103926] ? page_cache_prev_miss+0x310/0x310 [ 1442.105053] ? evict_inodes+0x470/0x470 [ 1442.106010] ? generic_write_checks+0x2ad/0x390 [ 1442.107136] __generic_file_write_iter+0x39d/0x5d0 [ 1442.108330] generic_file_write_iter+0xdb/0x230 [ 1442.109421] ? iov_iter_init+0x3c/0x130 [ 1442.110386] new_sync_write+0x42c/0x660 [ 1442.111325] ? new_sync_read+0x6f0/0x6f0 [ 1442.112276] ? __x64_sys_pwrite64+0x201/0x260 [ 1442.113333] ? lock_release+0x680/0x680 [ 1442.114279] ? avc_policy_seqno+0x9/0x70 [ 1442.115235] ? selinux_file_permission+0x92/0x520 [ 1442.116375] ? security_file_permission+0xb1/0xe0 [ 1442.117526] vfs_write+0x7c0/0xb10 [ 1442.118380] __x64_sys_pwrite64+0x201/0x260 [ 1442.119391] ? ksys_pwrite64+0x1b0/0x1b0 [ 1442.120348] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1442.121582] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1442.122809] do_syscall_64+0x33/0x40 [ 1442.123688] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1442.124905] RIP: 0033:0x7f3eb14f5b19 [ 1442.125778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1442.130086] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1442.131851] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1442.133510] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 05:50:31 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 3) [ 1442.135174] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1442.137002] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1442.138673] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1442.169642] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1442.172097] EXT4-fs (loop4): group descriptors corrupted! 05:50:31 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:50:31 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r4, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'osx.', '\x00'}, &(0x7f0000000280)='#^#,@,-\\\x00', 0x9, 0x3) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_WRITE={0x17, 0x2, 0x2000, @fd=r5, 0x81, &(0x7f0000000340)="2a66ceb690c24aa2ac979edf002ebd886f779a7b7d705114351740861e6b27308303713c64b065265fb1ecf2e1be030825b8c799333a7bf327242483917206451b57123b48674d43b35e695b9bfe78c24f39ce706ffda5e9883cc382079dcc131719940ef5a476688e910aa2499b06b5ec35783d88c8f13a3d3adc82859f20035dca1e8a5979bb1ad031a31ddab555ddba395939602e3bd91598abe4b7e59965784c6c45bb", 0xa5, 0x11, 0x1}, 0x5) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_enter(r6, 0x6b7a, 0x89ed, 0x1, &(0x7f0000000440)={[0x6]}, 0x8) 05:50:31 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 05:50:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 80) [ 1442.279028] FAULT_INJECTION: forcing a failure. [ 1442.279028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1442.280544] CPU: 1 PID: 11153 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1442.281393] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1442.282415] Call Trace: [ 1442.282744] dump_stack+0x107/0x167 [ 1442.283198] should_fail.cold+0x5/0xa [ 1442.283669] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1442.284320] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1442.284951] ? simple_write_begin+0x109/0x2e0 [ 1442.285502] generic_perform_write+0x279/0x4f0 [ 1442.286080] ? __mnt_drop_write_file+0x9/0x70 [ 1442.286623] ? page_cache_prev_miss+0x310/0x310 [ 1442.287189] ? evict_inodes+0x470/0x470 [ 1442.287675] ? generic_write_checks+0x2ad/0x390 [ 1442.288256] __generic_file_write_iter+0x39d/0x5d0 [ 1442.288876] generic_file_write_iter+0xdb/0x230 [ 1442.289457] ? iov_iter_init+0x3c/0x130 [ 1442.289959] new_sync_write+0x42c/0x660 [ 1442.290445] ? new_sync_read+0x6f0/0x6f0 [ 1442.290940] ? __x64_sys_pwrite64+0x201/0x260 [ 1442.291490] ? lock_release+0x680/0x680 [ 1442.291975] ? avc_policy_seqno+0x9/0x70 [ 1442.292464] ? selinux_file_permission+0x92/0x520 [ 1442.293052] ? security_file_permission+0xb1/0xe0 [ 1442.293639] vfs_write+0x7c0/0xb10 [ 1442.294086] __x64_sys_pwrite64+0x201/0x260 [ 1442.294608] ? ksys_pwrite64+0x1b0/0x1b0 [ 1442.295103] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1442.295743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1442.296370] do_syscall_64+0x33/0x40 [ 1442.296823] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1442.297442] RIP: 0033:0x7f3eb14f5b19 [ 1442.297893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1442.300119] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1442.301036] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1442.301897] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1442.302771] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1442.303629] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1442.304491] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1442.403680] FAULT_INJECTION: forcing a failure. [ 1442.403680] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.405072] CPU: 1 PID: 11162 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1442.405865] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1442.406832] Call Trace: [ 1442.407138] dump_stack+0x107/0x167 [ 1442.407555] should_fail.cold+0x5/0xa [ 1442.407992] ? create_object.isra.0+0x3a/0xa30 [ 1442.408518] should_failslab+0x5/0x20 [ 1442.408958] kmem_cache_alloc+0x5b/0x310 [ 1442.409423] create_object.isra.0+0x3a/0xa30 [ 1442.409920] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1442.410515] __kmalloc+0x16e/0x390 [ 1442.410934] fib6_info_alloc+0x3c/0x110 [ 1442.411389] ip6_route_info_create+0x379/0x1a10 [ 1442.411925] ? mutex_lock_io_nested+0xf30/0xf30 [ 1442.412461] ? fib6_nh_init+0x18d0/0x18d0 [ 1442.412941] ? cap_capable+0x1cd/0x230 [ 1442.413408] ip6_route_add+0x24/0x150 [ 1442.413864] ipv6_route_ioctl+0x39d/0x550 [ 1442.414382] ? rt6_purge_dflt_routers+0xfa0/0xfa0 [ 1442.414932] ? find_held_lock+0x2c/0x110 [ 1442.415421] ? _copy_from_user+0xfb/0x1b0 [ 1442.415902] inet6_ioctl+0x24f/0x290 [ 1442.416327] ? inet6_release+0x70/0x70 [ 1442.416781] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1442.417379] ? SOFTIRQ_verbose+0x10/0x10 [ 1442.417858] ? find_held_lock+0x2c/0x110 [ 1442.418336] sock_do_ioctl+0xd3/0x300 [ 1442.418775] ? compat_ifr_data_ioctl+0x180/0x180 [ 1442.419323] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1442.419979] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1442.420569] ? do_vfs_ioctl+0x283/0x10d0 [ 1442.421036] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1442.421661] ? generic_block_fiemap+0x60/0x60 [ 1442.422220] ? lock_downgrade+0x6d0/0x6d0 [ 1442.422703] sock_ioctl+0x3ef/0x710 [ 1442.423120] ? dlci_ioctl_set+0x30/0x30 [ 1442.423579] ? selinux_file_ioctl+0xb6/0x270 [ 1442.424088] ? dlci_ioctl_set+0x30/0x30 [ 1442.424563] __x64_sys_ioctl+0x19a/0x210 [ 1442.425061] do_syscall_64+0x33/0x40 [ 1442.425501] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1442.426091] RIP: 0033:0x7f5fe80fdb19 [ 1442.426523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1442.428635] RSP: 002b:00007f5fe5673188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1442.429510] RAX: ffffffffffffffda RBX: 00007f5fe8210f60 RCX: 00007f5fe80fdb19 [ 1442.430334] RDX: 00000000200000c0 RSI: 000000000000890b RDI: 0000000000000003 [ 1442.431151] RBP: 00007f5fe56731d0 R08: 0000000000000000 R09: 0000000000000000 [ 1442.431972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1442.432786] R13: 00007ffe619feb5f R14: 00007f5fe5673300 R15: 0000000000022000 05:50:46 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 4) 05:50:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x2, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:50:46 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:50:46 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8, 0x0, 0x0) 05:50:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 81) 05:50:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x55fff, 0x8001) 05:50:46 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r0, 0x10000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd01010000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x200) syz_io_uring_setup(0x97d, &(0x7f0000000340)={0x0, 0x2ced, 0x10, 0x2, 0x65}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000280), &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r7, 0x80, &(0x7f0000000040)=@l2={0x1f, 0xba4, @none, 0x87}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r9}}, 0x6) syz_io_uring_submit(r4, r6, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2004, @fd_index=0x5, 0x100, &(0x7f0000000040)=""/12, 0xc, 0x6, 0x0, {0x0, r9}}, 0x5) 05:50:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:50:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x4b47, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1457.492675] FAULT_INJECTION: forcing a failure. [ 1457.492675] name failslab, interval 1, probability 0, space 0, times 0 [ 1457.495254] CPU: 1 PID: 11170 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1457.495399] FAULT_INJECTION: forcing a failure. [ 1457.495399] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1457.496722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1457.496729] Call Trace: [ 1457.496755] dump_stack+0x107/0x167 [ 1457.496779] should_fail.cold+0x5/0xa [ 1457.502131] ? create_object.isra.0+0x3a/0xa30 [ 1457.503092] should_failslab+0x5/0x20 [ 1457.503894] kmem_cache_alloc+0x5b/0x310 [ 1457.504756] create_object.isra.0+0x3a/0xa30 [ 1457.505691] kmemleak_alloc_percpu+0xa0/0x100 [ 1457.506645] pcpu_alloc+0x4e2/0x1240 [ 1457.507447] fib_nh_common_init+0x2d/0x160 [ 1457.508333] fib6_nh_init+0x76e/0x18d0 [ 1457.509150] ? icmp6_dst_alloc+0x660/0x660 [ 1457.510042] ? ip_fib_metrics_init+0x3ca/0x7d0 [ 1457.511006] ? gre_gro_receive+0x1740/0x1740 [ 1457.511927] ? kasan_unpoison_shadow+0x33/0x50 [ 1457.512885] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1457.513960] ip6_route_info_create+0x1199/0x1a10 [ 1457.514978] ? fib6_nh_init+0x18d0/0x18d0 [ 1457.515848] ? cap_capable+0x1cd/0x230 [ 1457.516679] ip6_route_add+0x24/0x150 [ 1457.517492] ipv6_route_ioctl+0x39d/0x550 [ 1457.518399] ? rt6_purge_dflt_routers+0xfa0/0xfa0 [ 1457.519399] ? find_held_lock+0x2c/0x110 [ 1457.520287] ? _copy_from_user+0xfb/0x1b0 [ 1457.521161] inet6_ioctl+0x24f/0x290 [ 1457.521933] ? inet6_release+0x70/0x70 [ 1457.522774] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1457.523875] ? SOFTIRQ_verbose+0x10/0x10 [ 1457.524727] ? find_held_lock+0x2c/0x110 [ 1457.525590] sock_do_ioctl+0xd3/0x300 [ 1457.526402] ? compat_ifr_data_ioctl+0x180/0x180 [ 1457.527400] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1457.528599] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1457.529672] ? do_vfs_ioctl+0x283/0x10d0 [ 1457.530533] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1457.531629] ? generic_block_fiemap+0x60/0x60 [ 1457.532562] ? lock_downgrade+0x6d0/0x6d0 [ 1457.533435] sock_ioctl+0x3ef/0x710 [ 1457.534212] ? dlci_ioctl_set+0x30/0x30 [ 1457.535045] ? selinux_file_ioctl+0xb6/0x270 [ 1457.535971] ? dlci_ioctl_set+0x30/0x30 [ 1457.536816] __x64_sys_ioctl+0x19a/0x210 [ 1457.537665] do_syscall_64+0x33/0x40 [ 1457.538452] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1457.539523] RIP: 0033:0x7f5fe80fdb19 [ 1457.540310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1457.544175] RSP: 002b:00007f5fe5673188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1457.545764] RAX: ffffffffffffffda RBX: 00007f5fe8210f60 RCX: 00007f5fe80fdb19 [ 1457.547263] RDX: 00000000200000c0 RSI: 000000000000890b RDI: 0000000000000003 [ 1457.548766] RBP: 00007f5fe56731d0 R08: 0000000000000000 R09: 0000000000000000 [ 1457.550264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.551748] R13: 00007ffe619feb5f R14: 00007f5fe5673300 R15: 0000000000022000 [ 1457.553271] CPU: 0 PID: 11174 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1457.554153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1457.555180] Call Trace: [ 1457.555520] dump_stack+0x107/0x167 [ 1457.555975] should_fail.cold+0x5/0xa [ 1457.556459] __alloc_pages_nodemask+0x182/0x600 [ 1457.557041] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1457.557794] ? find_get_entry+0x2c8/0x740 [ 1457.558319] ? exc_page_fault+0xca/0x1a0 [ 1457.558825] ? trace_hardirqs_on+0x5b/0x180 [ 1457.559372] alloc_pages_current+0x187/0x280 [ 1457.559923] __page_cache_alloc+0x2d2/0x360 [ 1457.560466] pagecache_get_page+0x2c7/0xc80 [ 1457.561004] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1457.561639] grab_cache_page_write_begin+0x64/0xa0 [ 1457.562264] simple_write_begin+0x30/0x2e0 [ 1457.562795] generic_perform_write+0x20a/0x4f0 [ 1457.563370] ? __mnt_drop_write_file+0x9/0x70 [ 1457.563927] ? page_cache_prev_miss+0x310/0x310 [ 1457.564518] ? evict_inodes+0x470/0x470 [ 1457.565025] ? generic_write_checks+0x2ad/0x390 [ 1457.565610] __generic_file_write_iter+0x39d/0x5d0 [ 1457.566235] generic_file_write_iter+0xdb/0x230 [ 1457.566811] ? iov_iter_init+0x3c/0x130 [ 1457.567315] new_sync_write+0x42c/0x660 [ 1457.567812] ? new_sync_read+0x6f0/0x6f0 [ 1457.568319] ? __x64_sys_pwrite64+0x201/0x260 [ 1457.568887] ? lock_release+0x680/0x680 [ 1457.569388] ? avc_policy_seqno+0x9/0x70 [ 1457.569889] ? selinux_file_permission+0x92/0x520 [ 1457.570497] ? security_file_permission+0xb1/0xe0 [ 1457.571097] vfs_write+0x7c0/0xb10 [ 1457.571541] __x64_sys_pwrite64+0x201/0x260 [ 1457.572074] ? ksys_pwrite64+0x1b0/0x1b0 [ 1457.572587] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1457.573236] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1457.573878] do_syscall_64+0x33/0x40 [ 1457.574346] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1457.574978] RIP: 0033:0x7f3eb14f5b19 [ 1457.575448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1457.577708] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1457.578659] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1457.579546] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1457.580434] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1457.581310] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1457.582196] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1457.591833] loop4: detected capacity change from 0 to 2097152 [ 1457.622340] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1457.624395] EXT4-fs (loop4): group descriptors corrupted! 05:50:46 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 5) 05:50:46 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:50:46 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 82) [ 1457.659766] FAULT_INJECTION: forcing a failure. [ 1457.659766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1457.661199] CPU: 0 PID: 11191 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1457.662028] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1457.663023] Call Trace: [ 1457.663347] dump_stack+0x107/0x167 [ 1457.663783] should_fail.cold+0x5/0xa [ 1457.664247] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1457.664890] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1457.665509] ? simple_write_begin+0x109/0x2e0 [ 1457.666049] generic_perform_write+0x279/0x4f0 [ 1457.666608] ? __mnt_drop_write_file+0x9/0x70 [ 1457.667143] ? page_cache_prev_miss+0x310/0x310 [ 1457.667699] ? evict_inodes+0x470/0x470 [ 1457.668181] ? generic_write_checks+0x2ad/0x390 [ 1457.668748] __generic_file_write_iter+0x39d/0x5d0 [ 1457.669336] generic_file_write_iter+0xdb/0x230 [ 1457.669894] ? iov_iter_init+0x3c/0x130 [ 1457.670385] new_sync_write+0x42c/0x660 [ 1457.670874] ? new_sync_read+0x6f0/0x6f0 [ 1457.671355] ? __x64_sys_pwrite64+0x201/0x260 [ 1457.671894] ? lock_release+0x680/0x680 [ 1457.672374] ? avc_policy_seqno+0x9/0x70 [ 1457.672856] ? selinux_file_permission+0x92/0x520 [ 1457.673432] ? security_file_permission+0xb1/0xe0 [ 1457.674007] vfs_write+0x7c0/0xb10 [ 1457.674443] __x64_sys_pwrite64+0x201/0x260 [ 1457.674952] ? ksys_pwrite64+0x1b0/0x1b0 [ 1457.675442] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1457.676064] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1457.676682] do_syscall_64+0x33/0x40 [ 1457.677126] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1457.677738] RIP: 0033:0x7f3eb14f5b19 [ 1457.678187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1457.680369] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1457.681273] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1457.682122] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1457.682967] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1457.683813] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1457.684668] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:50:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x56fff, 0x8001) 05:50:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x4b49, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:50:46 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xea, 0x0, 0x0) [ 1457.754963] FAULT_INJECTION: forcing a failure. [ 1457.754963] name failslab, interval 1, probability 0, space 0, times 0 [ 1457.756317] CPU: 0 PID: 11195 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1457.757112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1457.758069] Call Trace: [ 1457.758391] dump_stack+0x107/0x167 [ 1457.758814] should_fail.cold+0x5/0xa [ 1457.759261] ? create_object.isra.0+0x3a/0xa30 [ 1457.759794] should_failslab+0x5/0x20 [ 1457.760237] kmem_cache_alloc+0x5b/0x310 [ 1457.760710] ? mark_held_locks+0x9e/0xe0 [ 1457.761185] create_object.isra.0+0x3a/0xa30 [ 1457.761701] kmemleak_alloc_percpu+0xa0/0x100 [ 1457.762232] pcpu_alloc+0x4e2/0x1240 [ 1457.762679] fib_nh_common_init+0x2d/0x160 [ 1457.763174] fib6_nh_init+0x76e/0x18d0 [ 1457.763629] ? icmp6_dst_alloc+0x660/0x660 [ 1457.764117] ? ip_fib_metrics_init+0x3ca/0x7d0 [ 1457.764650] ? gre_gro_receive+0x1740/0x1740 [ 1457.765166] ? kasan_unpoison_shadow+0x33/0x50 [ 1457.765699] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1457.766299] ip6_route_info_create+0x1199/0x1a10 [ 1457.766849] ? fib6_nh_init+0x18d0/0x18d0 [ 1457.767332] ? cap_capable+0x1cd/0x230 [ 1457.767788] ip6_route_add+0x24/0x150 [ 1457.768232] ipv6_route_ioctl+0x39d/0x550 [ 1457.768718] ? rt6_purge_dflt_routers+0xfa0/0xfa0 [ 1457.769277] ? find_held_lock+0x2c/0x110 [ 1457.769768] ? _copy_from_user+0xfb/0x1b0 [ 1457.770262] inet6_ioctl+0x24f/0x290 [ 1457.770690] ? inet6_release+0x70/0x70 [ 1457.771148] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1457.771756] ? SOFTIRQ_verbose+0x10/0x10 [ 1457.772226] ? find_held_lock+0x2c/0x110 [ 1457.772704] sock_do_ioctl+0xd3/0x300 [ 1457.773145] ? compat_ifr_data_ioctl+0x180/0x180 [ 1457.773700] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1457.774374] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1457.774975] ? do_vfs_ioctl+0x283/0x10d0 [ 1457.775444] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1457.776057] ? generic_block_fiemap+0x60/0x60 [ 1457.776575] ? lock_downgrade+0x6d0/0x6d0 [ 1457.777057] sock_ioctl+0x3ef/0x710 [ 1457.777483] ? dlci_ioctl_set+0x30/0x30 [ 1457.777950] ? selinux_file_ioctl+0xb6/0x270 [ 1457.778470] ? dlci_ioctl_set+0x30/0x30 [ 1457.778933] __x64_sys_ioctl+0x19a/0x210 [ 1457.779406] do_syscall_64+0x33/0x40 [ 1457.779847] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1457.780448] RIP: 0033:0x7f5fe80fdb19 [ 1457.780877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1457.783027] RSP: 002b:00007f5fe5673188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1457.783911] RAX: ffffffffffffffda RBX: 00007f5fe8210f60 RCX: 00007f5fe80fdb19 [ 1457.784738] RDX: 00000000200000c0 RSI: 000000000000890b RDI: 0000000000000003 [ 1457.785563] RBP: 00007f5fe56731d0 R08: 0000000000000000 R09: 0000000000000000 [ 1457.786396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.787220] R13: 00007ffe619feb5f R14: 00007f5fe5673300 R15: 0000000000022000 05:50:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:50:47 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:50:47 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 83) 05:50:47 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r7 = socket(0x35, 0x1, 0x5) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd00fe0000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r8, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r10}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r10}}, 0x6) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r7, 0x80, &(0x7f0000000080)=@rc={0x1f, @none, 0x1}, 0x0, 0x0, 0x0, {0x0, r10}}, 0x6) [ 1457.871773] loop4: detected capacity change from 0 to 2097152 [ 1457.888624] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1457.889736] EXT4-fs (loop4): group descriptors corrupted! 05:50:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x541b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:50:47 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x57fff, 0x8001) 05:50:47 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) [ 1458.002476] FAULT_INJECTION: forcing a failure. [ 1458.002476] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1458.003915] CPU: 0 PID: 11221 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1458.004718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1458.005674] Call Trace: [ 1458.005983] dump_stack+0x107/0x167 [ 1458.006413] should_fail.cold+0x5/0xa [ 1458.006857] __alloc_pages_nodemask+0x182/0x600 [ 1458.007397] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1458.008089] ? find_get_entry+0x2c8/0x740 [ 1458.008563] ? exc_page_fault+0xca/0x1a0 [ 1458.009026] ? trace_hardirqs_on+0x5b/0x180 [ 1458.009527] alloc_pages_current+0x187/0x280 [ 1458.010038] __page_cache_alloc+0x2d2/0x360 [ 1458.010548] pagecache_get_page+0x2c7/0xc80 [ 1458.011047] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1458.011634] grab_cache_page_write_begin+0x64/0xa0 [ 1458.012199] simple_write_begin+0x30/0x2e0 [ 1458.012688] generic_perform_write+0x20a/0x4f0 [ 1458.013218] ? __mnt_drop_write_file+0x9/0x70 [ 1458.013730] ? page_cache_prev_miss+0x310/0x310 [ 1458.014276] ? evict_inodes+0x470/0x470 [ 1458.014735] ? generic_write_checks+0x2ad/0x390 [ 1458.015280] __generic_file_write_iter+0x39d/0x5d0 [ 1458.015849] generic_file_write_iter+0xdb/0x230 [ 1458.016380] ? iov_iter_init+0x3c/0x130 [ 1458.016844] new_sync_write+0x42c/0x660 [ 1458.017303] ? new_sync_read+0x6f0/0x6f0 [ 1458.017771] ? __x64_sys_pwrite64+0x201/0x260 [ 1458.018297] ? lock_release+0x680/0x680 [ 1458.018753] ? avc_policy_seqno+0x9/0x70 [ 1458.019219] ? selinux_file_permission+0x92/0x520 [ 1458.019775] ? security_file_permission+0xb1/0xe0 [ 1458.020334] vfs_write+0x7c0/0xb10 [ 1458.020744] __x64_sys_pwrite64+0x201/0x260 [ 1458.021239] ? ksys_pwrite64+0x1b0/0x1b0 [ 1458.021708] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1458.022318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1458.022913] do_syscall_64+0x33/0x40 [ 1458.023342] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1458.023929] RIP: 0033:0x7f3eb14f5b19 [ 1458.024358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1458.026466] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1458.027339] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1458.028157] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1458.028977] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1458.029795] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1458.030617] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:51:00 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 6) [ 1471.752892] FAULT_INJECTION: forcing a failure. [ 1471.752892] name failslab, interval 1, probability 0, space 0, times 0 [ 1471.755366] CPU: 0 PID: 11233 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1471.756837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1471.758625] Call Trace: [ 1471.759193] dump_stack+0x107/0x167 [ 1471.759978] should_fail.cold+0x5/0xa [ 1471.760795] ? create_object.isra.0+0x3a/0xa30 [ 1471.761763] should_failslab+0x5/0x20 [ 1471.762582] kmem_cache_alloc+0x5b/0x310 [ 1471.763457] create_object.isra.0+0x3a/0xa30 [ 1471.764397] kmemleak_alloc_percpu+0xa0/0x100 [ 1471.765354] pcpu_alloc+0x4e2/0x1240 [ 1471.766169] fib6_nh_init+0x79e/0x18d0 [ 1471.767072] ? icmp6_dst_alloc+0x660/0x660 [ 1471.767986] ? ip_fib_metrics_init+0x3ca/0x7d0 [ 1471.768958] ? gre_gro_receive+0x1740/0x1740 [ 1471.769896] ? kasan_unpoison_shadow+0x33/0x50 [ 1471.770873] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1471.771958] ip6_route_info_create+0x1199/0x1a10 [ 1471.772978] ? fib6_nh_init+0x18d0/0x18d0 [ 1471.773863] ? cap_capable+0x1cd/0x230 [ 1471.774708] ip6_route_add+0x24/0x150 [ 1471.775519] ipv6_route_ioctl+0x39d/0x550 [ 1471.776410] ? rt6_purge_dflt_routers+0xfa0/0xfa0 [ 1471.777434] ? find_held_lock+0x2c/0x110 [ 1471.778359] ? _copy_from_user+0xfb/0x1b0 [ 1471.779242] inet6_ioctl+0x24f/0x290 [ 1471.780031] ? inet6_release+0x70/0x70 [ 1471.780884] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1471.782005] ? SOFTIRQ_verbose+0x10/0x10 [ 1471.782873] ? find_held_lock+0x2c/0x110 [ 1471.783747] sock_do_ioctl+0xd3/0x300 [ 1471.784559] ? compat_ifr_data_ioctl+0x180/0x180 05:51:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:51:00 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x5421, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 84) 05:51:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x58fff, 0x8001) 05:51:00 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) 05:51:00 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xc43, 0x94) [ 1471.785573] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1471.787089] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1471.788185] ? do_vfs_ioctl+0x283/0x10d0 [ 1471.789057] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1471.790175] ? generic_block_fiemap+0x60/0x60 [ 1471.791147] ? lock_downgrade+0x6d0/0x6d0 [ 1471.792038] sock_ioctl+0x3ef/0x710 [ 1471.792821] ? dlci_ioctl_set+0x30/0x30 [ 1471.793680] ? selinux_file_ioctl+0xb6/0x270 [ 1471.794635] ? dlci_ioctl_set+0x30/0x30 [ 1471.795496] __x64_sys_ioctl+0x19a/0x210 [ 1471.796383] do_syscall_64+0x33/0x40 [ 1471.797180] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1471.798277] RIP: 0033:0x7f5fe80fdb19 [ 1471.799083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1471.803007] RSP: 002b:00007f5fe5673188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1471.804631] RAX: ffffffffffffffda RBX: 00007f5fe8210f60 RCX: 00007f5fe80fdb19 [ 1471.806156] RDX: 00000000200000c0 RSI: 000000000000890b RDI: 0000000000000003 [ 1471.807684] RBP: 00007f5fe56731d0 R08: 0000000000000000 R09: 0000000000000000 [ 1471.809210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1471.810739] R13: 00007ffe619feb5f R14: 00007f5fe5673300 R15: 0000000000022000 05:51:01 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeaff, 0x0, 0x0) 05:51:01 executing program 2: r0 = shmget(0x3, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0xa626e95ce2abdbf8) r1 = syz_io_uring_setup(0x1001c29, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1471.828746] loop4: detected capacity change from 0 to 2097152 [ 1471.849096] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1471.851214] EXT4-fs (loop4): group descriptors corrupted! [ 1471.879774] FAULT_INJECTION: forcing a failure. [ 1471.879774] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:51:01 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1471.882601] CPU: 0 PID: 11245 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1471.884085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1471.885853] Call Trace: [ 1471.886447] dump_stack+0x107/0x167 [ 1471.887232] should_fail.cold+0x5/0xa [ 1471.888056] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1471.889204] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1471.890306] ? simple_write_begin+0x109/0x2e0 [ 1471.891261] generic_perform_write+0x279/0x4f0 [ 1471.892237] ? __mnt_drop_write_file+0x9/0x70 [ 1471.893186] ? page_cache_prev_miss+0x310/0x310 [ 1471.894168] ? evict_inodes+0x470/0x470 [ 1471.895028] ? generic_write_checks+0x2ad/0x390 [ 1471.896027] __generic_file_write_iter+0x39d/0x5d0 [ 1471.897076] generic_file_write_iter+0xdb/0x230 [ 1471.898079] ? iov_iter_init+0x3c/0x130 [ 1471.898949] new_sync_write+0x42c/0x660 [ 1471.899795] ? new_sync_read+0x6f0/0x6f0 [ 1471.900655] ? __x64_sys_pwrite64+0x201/0x260 [ 1471.901619] ? lock_release+0x680/0x680 [ 1471.902482] ? avc_policy_seqno+0x9/0x70 [ 1471.903341] ? selinux_file_permission+0x92/0x520 [ 1471.904375] ? security_file_permission+0xb1/0xe0 [ 1471.905404] vfs_write+0x7c0/0xb10 [ 1471.906175] __x64_sys_pwrite64+0x201/0x260 [ 1471.907130] ? ksys_pwrite64+0x1b0/0x1b0 [ 1471.907994] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1471.909111] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1471.910203] do_syscall_64+0x33/0x40 [ 1471.911003] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1471.912092] RIP: 0033:0x7f3eb14f5b19 [ 1471.912881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1471.916778] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1471.918390] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1471.919914] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1471.921426] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1471.922937] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1471.924447] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:51:01 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 7) 05:51:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x5450, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1471.999222] FAULT_INJECTION: forcing a failure. [ 1471.999222] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.001712] CPU: 1 PID: 11258 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1472.003177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1472.004920] Call Trace: [ 1472.005491] dump_stack+0x107/0x167 [ 1472.006271] should_fail.cold+0x5/0xa [ 1472.007080] ? create_object.isra.0+0x3a/0xa30 [ 1472.008033] should_failslab+0x5/0x20 [ 1472.008835] kmem_cache_alloc+0x5b/0x310 [ 1472.009690] ? mark_held_locks+0x9e/0xe0 [ 1472.010556] create_object.isra.0+0x3a/0xa30 [ 1472.011498] kmemleak_alloc_percpu+0xa0/0x100 [ 1472.012451] pcpu_alloc+0x4e2/0x1240 [ 1472.013261] fib6_nh_init+0x79e/0x18d0 [ 1472.014085] ? icmp6_dst_alloc+0x660/0x660 [ 1472.014990] ? ip_fib_metrics_init+0x3ca/0x7d0 [ 1472.015968] ? gre_gro_receive+0x1740/0x1740 [ 1472.016896] ? kasan_unpoison_shadow+0x33/0x50 [ 1472.017857] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1472.018945] ip6_route_info_create+0x1199/0x1a10 [ 1472.019951] ? fib6_nh_init+0x18d0/0x18d0 [ 1472.020821] ? cap_capable+0x1cd/0x230 [ 1472.021647] ip6_route_add+0x24/0x150 [ 1472.022462] ipv6_route_ioctl+0x39d/0x550 [ 1472.023355] ? rt6_purge_dflt_routers+0xfa0/0xfa0 [ 1472.024359] ? find_held_lock+0x2c/0x110 [ 1472.025248] ? _copy_from_user+0xfb/0x1b0 [ 1472.026122] inet6_ioctl+0x24f/0x290 [ 1472.026922] ? inet6_release+0x70/0x70 [ 1472.027759] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1472.028867] ? SOFTIRQ_verbose+0x10/0x10 [ 1472.029719] ? find_held_lock+0x2c/0x110 [ 1472.030580] sock_do_ioctl+0xd3/0x300 [ 1472.031388] ? compat_ifr_data_ioctl+0x180/0x180 [ 1472.032386] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 1472.033610] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 1472.034705] ? do_vfs_ioctl+0x283/0x10d0 [ 1472.035562] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 1472.036659] ? generic_block_fiemap+0x60/0x60 [ 1472.037605] ? lock_downgrade+0x6d0/0x6d0 [ 1472.038489] sock_ioctl+0x3ef/0x710 [ 1472.039261] ? dlci_ioctl_set+0x30/0x30 [ 1472.040104] ? selinux_file_ioctl+0xb6/0x270 [ 1472.041049] ? dlci_ioctl_set+0x30/0x30 [ 1472.041892] __x64_sys_ioctl+0x19a/0x210 [ 1472.042756] do_syscall_64+0x33/0x40 [ 1472.043546] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1472.044629] RIP: 0033:0x7f5fe80fdb19 [ 1472.045407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1472.049299] RSP: 002b:00007f5fe5673188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1472.050911] RAX: ffffffffffffffda RBX: 00007f5fe8210f60 RCX: 00007f5fe80fdb19 [ 1472.052410] RDX: 00000000200000c0 RSI: 000000000000890b RDI: 0000000000000003 [ 1472.053905] RBP: 00007f5fe56731d0 R08: 0000000000000000 R09: 0000000000000000 [ 1472.055416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1472.056932] R13: 00007ffe619feb5f R14: 00007f5fe5673300 R15: 0000000000022000 05:51:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 85) 05:51:14 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) (fail_nth: 8) 05:51:14 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x5451, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:14 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffea, 0x0, 0x0) 05:51:14 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x20, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r4 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r4, &(0x7f0000000140)="b2", 0x20000141, 0x8001) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000200)=""/11) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:14 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x59fff, 0x8001) 05:51:14 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1485.372588] FAULT_INJECTION: forcing a failure. [ 1485.372588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1485.375351] CPU: 1 PID: 11274 Comm: syz-executor.5 Not tainted 5.10.253 #1 [ 1485.376057] loop4: detected capacity change from 0 to 2097152 [ 1485.376870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1485.379541] Call Trace: [ 1485.380117] dump_stack+0x107/0x167 [ 1485.380904] should_fail.cold+0x5/0xa [ 1485.381772] _copy_to_user+0x2e/0x180 [ 1485.382621] simple_read_from_buffer+0xcc/0x160 [ 1485.383632] proc_fail_nth_read+0x198/0x230 [ 1485.384565] ? proc_sessionid_read+0x230/0x230 [ 1485.385578] ? security_file_permission+0xb1/0xe0 [ 1485.386754] ? proc_sessionid_read+0x230/0x230 [ 1485.387946] vfs_read+0x228/0x620 [ 1485.388913] ksys_read+0x12d/0x260 [ 1485.389905] ? vfs_write+0xb10/0xb10 [ 1485.390949] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1485.392417] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1485.393856] do_syscall_64+0x33/0x40 [ 1485.394898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1485.396343] RIP: 0033:0x7f5fe80b069c [ 1485.397371] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1485.402353] RSP: 002b:00007f5fe5673170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1485.404437] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f5fe80b069c [ 1485.406351] RDX: 000000000000000f RSI: 00007f5fe56731e0 RDI: 0000000000000005 [ 1485.408290] RBP: 00007f5fe56731d0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.410230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1485.412175] R13: 00007ffe619feb5f R14: 00007f5fe5673300 R15: 0000000000022000 [ 1485.431384] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1485.433959] EXT4-fs (loop4): group descriptors corrupted! 05:51:14 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x1, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x50d4, &(0x7f00000001c0)={0x0, 0xce99, 0x10, 0x1, 0x17c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r5, &(0x7f00000003c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r0, 0x3, &(0x7f0000000380)="85d2825ac98689ef6909da7a74ce582b74ae1f7396574649f5920f9c65a1a3d1a47c16ee470a825f237a4b2819", 0x2d, 0x10, 0x1}, 0x401) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1d38, &(0x7f0000000040)={0x0, 0x211a, 0x4, 0x3, 0x83, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 05:51:14 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x5452, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:14 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1485.504108] FAULT_INJECTION: forcing a failure. [ 1485.504108] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1485.507892] CPU: 1 PID: 11284 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1485.509514] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1485.511475] Call Trace: [ 1485.512098] dump_stack+0x107/0x167 [ 1485.512959] should_fail.cold+0x5/0xa [ 1485.513872] __alloc_pages_nodemask+0x182/0x600 [ 1485.514988] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1485.516402] ? find_get_entry+0x2c8/0x740 [ 1485.517367] ? vmacache_find+0x55/0x2a0 [ 1485.518312] alloc_pages_current+0x187/0x280 [ 1485.519353] __page_cache_alloc+0x2d2/0x360 [ 1485.520355] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1485.521577] pagecache_get_page+0x2c7/0xc80 [ 1485.522600] ? asm_exc_page_fault+0x1e/0x30 [ 1485.523605] grab_cache_page_write_begin+0x64/0xa0 [ 1485.524740] ext4_da_write_begin+0x2f3/0xd40 [ 1485.525757] ? iov_iter_fault_in_readable+0x1f7/0x410 [ 1485.526960] ? ext4_write_begin+0x10f0/0x10f0 [ 1485.528000] ? copyout_mc+0x140/0x140 [ 1485.528895] generic_perform_write+0x20a/0x4f0 [ 1485.529976] ? page_cache_prev_miss+0x310/0x310 [ 1485.531072] ? down_write_killable+0x180/0x180 [ 1485.532143] ext4_buffered_write_iter+0x232/0x4a0 [ 1485.533272] ext4_file_write_iter+0x3ab/0x1530 [ 1485.534334] ? __lock_acquire+0x1657/0x5b00 [ 1485.535363] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1485.536437] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1485.537645] ? SOFTIRQ_verbose+0x10/0x10 [ 1485.538620] new_sync_write+0x42c/0x660 [ 1485.539552] ? new_sync_read+0x6f0/0x6f0 [ 1485.540491] ? __x64_sys_pwrite64+0x201/0x260 [ 1485.541523] ? lock_release+0x680/0x680 [ 1485.542437] ? avc_policy_seqno+0x9/0x70 [ 1485.543367] ? selinux_file_permission+0x92/0x520 [ 1485.544480] ? security_file_permission+0xb1/0xe0 [ 1485.545573] vfs_write+0x7c0/0xb10 [ 1485.546383] __x64_sys_pwrite64+0x201/0x260 [ 1485.547366] ? ksys_pwrite64+0x1b0/0x1b0 [ 1485.548300] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1485.549497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1485.550687] do_syscall_64+0x33/0x40 [ 1485.551533] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1485.552706] RIP: 0033:0x7f3eb14f5b19 [ 1485.553561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1485.557819] RSP: 002b:00007f3eaea4a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1485.559567] RAX: ffffffffffffffda RBX: 00007f3eb1609020 RCX: 00007f3eb14f5b19 [ 1485.561190] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1485.562806] RBP: 00007f3eaea4a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1485.564411] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1485.566040] R13: 00007ffd8534e86f R14: 00007f3eaea4a300 R15: 0000000000022000 05:51:14 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x80000, 0x0, 0x0) 05:51:14 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x2, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:14 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x17, 0x80010, r0, 0x10000000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:14 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x5460, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:29 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 86) 05:51:29 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8901, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:29 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000, 0x0, 0x0) 05:51:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:51:29 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x5afff, 0x8001) 05:51:29 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:29 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x4b47, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:29 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffff00000000180000016f9159fd859b9ab59157193f027f5a256424704ed974b4094341d03c4ac5fdd8348a4e7b38b425f8f6f9e1ddfcc94e3ccdc538065301039dc840c81526b1cbba91d667069fb83d66654e98473bf574cc1281ab1db2d784d74ee00d3ae032c5d7cbf92e", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r0 = creat(&(0x7f0000000080)='.\x00', 0x82) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x2, 0x8, 0x0, 0x1e2, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x3, @fd=r1, 0x100000001, &(0x7f0000000340)=""/208, 0xd0, 0x17}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_id(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x3) [ 1499.992525] loop4: detected capacity change from 0 to 2097152 [ 1500.005000] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1500.006197] EXT4-fs (loop4): group descriptors corrupted! [ 1500.018935] FAULT_INJECTION: forcing a failure. [ 1500.018935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1500.021721] CPU: 0 PID: 11330 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1500.023343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1500.025253] Call Trace: [ 1500.025866] dump_stack+0x107/0x167 05:51:29 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x400000, 0x0, 0x0) [ 1500.026732] should_fail.cold+0x5/0xa [ 1500.027772] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1500.029001] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1500.030173] ? simple_write_begin+0x109/0x2e0 [ 1500.031256] generic_perform_write+0x279/0x4f0 [ 1500.032319] ? __mnt_drop_write_file+0x9/0x70 [ 1500.033352] ? page_cache_prev_miss+0x310/0x310 [ 1500.034429] ? evict_inodes+0x470/0x470 [ 1500.035373] ? generic_write_checks+0x2ad/0x390 [ 1500.036470] __generic_file_write_iter+0x39d/0x5d0 [ 1500.037623] generic_file_write_iter+0xdb/0x230 [ 1500.038727] ? iov_iter_init+0x3c/0x130 [ 1500.039639] new_sync_write+0x42c/0x660 [ 1500.040557] ? new_sync_read+0x6f0/0x6f0 [ 1500.041502] ? __x64_sys_pwrite64+0x201/0x260 [ 1500.042565] ? lock_release+0x680/0x680 05:51:29 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8902, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:29 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1500.043507] ? avc_policy_seqno+0x9/0x70 [ 1500.044474] ? selinux_file_permission+0x92/0x520 [ 1500.045583] ? security_file_permission+0xb1/0xe0 [ 1500.046729] vfs_write+0x7c0/0xb10 [ 1500.047548] __x64_sys_pwrite64+0x201/0x260 [ 1500.048532] ? ksys_pwrite64+0x1b0/0x1b0 [ 1500.049464] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1500.050711] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1500.051923] do_syscall_64+0x33/0x40 [ 1500.052781] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1500.053975] RIP: 0033:0x7f3eb14f5b19 [ 1500.054864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1500.059133] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1500.060887] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1500.062528] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1500.064209] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1500.065852] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1500.067509] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:51:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 87) 05:51:45 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x4b49, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:45 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf0ff7f, 0x0, 0x0) 05:51:45 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x1}, 0x101) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:45 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x5bfff, 0x8001) 05:51:45 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8903, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:45 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400), 0x0, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1516.615351] loop4: detected capacity change from 0 to 2097152 [ 1516.628025] FAULT_INJECTION: forcing a failure. [ 1516.628025] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1516.630776] CPU: 0 PID: 11364 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1516.632294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1516.634359] Call Trace: [ 1516.635034] dump_stack+0x107/0x167 [ 1516.635969] should_fail.cold+0x5/0xa [ 1516.636937] __alloc_pages_nodemask+0x182/0x600 [ 1516.638111] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1516.639657] ? find_get_entry+0x2c8/0x740 [ 1516.640624] ? exc_page_fault+0xca/0x1a0 [ 1516.641499] ? trace_hardirqs_on+0x5b/0x180 [ 1516.642452] alloc_pages_current+0x187/0x280 [ 1516.643415] __page_cache_alloc+0x2d2/0x360 [ 1516.644355] pagecache_get_page+0x2c7/0xc80 [ 1516.645294] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1516.646405] grab_cache_page_write_begin+0x64/0xa0 [ 1516.647485] simple_write_begin+0x30/0x2e0 [ 1516.648402] generic_perform_write+0x20a/0x4f0 [ 1516.649401] ? __mnt_drop_write_file+0x9/0x70 [ 1516.650377] ? page_cache_prev_miss+0x310/0x310 [ 1516.651389] ? evict_inodes+0x470/0x470 [ 1516.652249] ? generic_write_checks+0x2ad/0x390 [ 1516.653259] __generic_file_write_iter+0x39d/0x5d0 [ 1516.654319] generic_file_write_iter+0xdb/0x230 [ 1516.655324] ? iov_iter_init+0x3c/0x130 [ 1516.656191] new_sync_write+0x42c/0x660 [ 1516.657049] ? new_sync_read+0x6f0/0x6f0 [ 1516.657935] ? __x64_sys_pwrite64+0x201/0x260 [ 1516.658917] ? lock_release+0x680/0x680 [ 1516.659776] ? avc_policy_seqno+0x9/0x70 [ 1516.660654] ? selinux_file_permission+0x92/0x520 [ 1516.661706] ? security_file_permission+0xb1/0xe0 [ 1516.662762] vfs_write+0x7c0/0xb10 [ 1516.663527] __x64_sys_pwrite64+0x201/0x260 [ 1516.664457] ? ksys_pwrite64+0x1b0/0x1b0 [ 1516.665338] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1516.666468] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1516.667590] do_syscall_64+0x33/0x40 [ 1516.668401] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1516.669506] RIP: 0033:0x7f3eb14f5b19 [ 1516.670313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1516.674289] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1516.675938] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1516.677477] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1516.679020] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1516.680561] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1516.682094] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:51:45 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x541b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:45 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8904, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1516.691007] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1516.693165] EXT4-fs (loop4): group descriptors corrupted! 05:51:45 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 88) 05:51:45 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000, 0x0, 0x0) 05:51:46 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080)=0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r0, 0xbef, 0x0, 0x1, 0x3, 0x1}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) fallocate(0xffffffffffffffff, 0x40, 0x7, 0x2) 05:51:46 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="020000", 0x3, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:51:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8906, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1516.858566] FAULT_INJECTION: forcing a failure. [ 1516.858566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1516.861274] CPU: 1 PID: 11381 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1516.862855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1516.864743] Call Trace: [ 1516.865353] dump_stack+0x107/0x167 [ 1516.866205] should_fail.cold+0x5/0xa [ 1516.867095] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1516.868291] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1516.869431] ? simple_write_begin+0x109/0x2e0 [ 1516.870444] generic_perform_write+0x279/0x4f0 [ 1516.871482] ? __mnt_drop_write_file+0x9/0x70 [ 1516.872490] ? page_cache_prev_miss+0x310/0x310 [ 1516.873531] ? evict_inodes+0x470/0x470 [ 1516.874424] ? generic_write_checks+0x2ad/0x390 [ 1516.875482] __generic_file_write_iter+0x39d/0x5d0 [ 1516.876603] generic_file_write_iter+0xdb/0x230 [ 1516.877642] ? iov_iter_init+0x3c/0x130 [ 1516.878539] new_sync_write+0x42c/0x660 [ 1516.879441] ? new_sync_read+0x6f0/0x6f0 [ 1516.880350] ? __x64_sys_pwrite64+0x201/0x260 [ 1516.881360] ? lock_release+0x680/0x680 [ 1516.882250] ? avc_policy_seqno+0x9/0x70 [ 1516.883175] ? selinux_file_permission+0x92/0x520 [ 1516.884265] ? security_file_permission+0xb1/0xe0 [ 1516.885352] vfs_write+0x7c0/0xb10 [ 1516.886166] __x64_sys_pwrite64+0x201/0x260 [ 1516.887147] ? ksys_pwrite64+0x1b0/0x1b0 [ 1516.888063] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1516.889239] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1516.890398] do_syscall_64+0x33/0x40 [ 1516.891259] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1516.892416] RIP: 0033:0x7f3eb14f5b19 [ 1516.893255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1516.897406] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1516.899128] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1516.900735] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1516.902335] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1516.903951] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1516.905560] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:51:46 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x5cfff, 0x8001) [ 1516.923669] loop4: detected capacity change from 0 to 2097152 05:51:46 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x5421, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1516.952717] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1516.954744] EXT4-fs (loop4): group descriptors corrupted! 05:51:58 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 89) 05:51:58 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000, 0x0, 0x0) 05:51:58 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x5450, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:58 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:58 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8907, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:58 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x0, 0x10000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r3 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) syz_io_uring_submit(r6, r2, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000000c0)={r7, r8+10000000}, 0x1, 0x1}, 0x80) creat(&(0x7f0000000280)='./file0\x00', 0x90) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r10 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r10, 0x0) syz_io_uring_submit(r13, r12, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r4, r12, &(0x7f0000000340)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x4) 05:51:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="020000", 0x3, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:51:58 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x5dfff, 0x8001) [ 1529.667623] loop4: detected capacity change from 0 to 2097152 [ 1529.681537] FAULT_INJECTION: forcing a failure. [ 1529.681537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1529.684375] CPU: 0 PID: 11409 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1529.686009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1529.687972] Call Trace: [ 1529.688605] dump_stack+0x107/0x167 [ 1529.689467] should_fail.cold+0x5/0xa [ 1529.690378] __alloc_pages_nodemask+0x182/0x600 [ 1529.691489] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1529.692919] ? find_get_entry+0x2c8/0x740 [ 1529.693895] ? exc_page_fault+0xca/0x1a0 [ 1529.694854] ? trace_hardirqs_on+0x5b/0x180 [ 1529.695895] alloc_pages_current+0x187/0x280 [ 1529.696929] __page_cache_alloc+0x2d2/0x360 [ 1529.697949] pagecache_get_page+0x2c7/0xc80 [ 1529.698980] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1529.700176] grab_cache_page_write_begin+0x64/0xa0 [ 1529.701351] simple_write_begin+0x30/0x2e0 [ 1529.702347] generic_perform_write+0x20a/0x4f0 [ 1529.703436] ? __mnt_drop_write_file+0x9/0x70 05:51:58 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) recvmsg(r4, &(0x7f0000000140)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/211, 0xd3}], 0x1, &(0x7f0000000440)=""/168, 0xa8}, 0x40012042) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1529.704490] ? page_cache_prev_miss+0x310/0x310 [ 1529.705815] ? evict_inodes+0x470/0x470 [ 1529.706751] ? generic_write_checks+0x2ad/0x390 [ 1529.707865] __generic_file_write_iter+0x39d/0x5d0 [ 1529.709026] generic_file_write_iter+0xdb/0x230 [ 1529.710112] ? iov_iter_init+0x3c/0x130 [ 1529.711066] new_sync_write+0x42c/0x660 [ 1529.712002] ? new_sync_read+0x6f0/0x6f0 [ 1529.712947] ? __x64_sys_pwrite64+0x201/0x260 [ 1529.714006] ? lock_release+0x680/0x680 [ 1529.714942] ? avc_policy_seqno+0x9/0x70 [ 1529.715892] ? selinux_file_permission+0x92/0x520 [ 1529.717021] ? security_file_permission+0xb1/0xe0 [ 1529.718160] vfs_write+0x7c0/0xb10 [ 1529.719010] __x64_sys_pwrite64+0x201/0x260 [ 1529.720021] ? ksys_pwrite64+0x1b0/0x1b0 [ 1529.720986] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1529.722215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1529.723435] do_syscall_64+0x33/0x40 [ 1529.724309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1529.725507] RIP: 0033:0x7f3eb14f5b19 [ 1529.726388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1529.730691] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1529.732481] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 05:51:58 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x5efff, 0x8001) 05:51:58 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 05:51:58 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1529.734149] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1529.735976] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1529.737663] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1529.739356] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1529.753303] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1529.754525] EXT4-fs (loop4): group descriptors corrupted! 05:51:59 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x5451, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:59 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 90) 05:51:59 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x7ffff000, 0x0, 0x0) [ 1529.849729] FAULT_INJECTION: forcing a failure. [ 1529.849729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1529.851209] CPU: 1 PID: 11441 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1529.852060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1529.853071] Call Trace: [ 1529.853401] dump_stack+0x107/0x167 [ 1529.853854] should_fail.cold+0x5/0xa [ 1529.854325] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1529.855007] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1529.855625] ? simple_write_begin+0x109/0x2e0 [ 1529.856178] generic_perform_write+0x279/0x4f0 [ 1529.856753] ? page_cache_prev_miss+0x310/0x310 [ 1529.857325] ? evict_inodes+0x470/0x470 [ 1529.857818] ? generic_write_checks+0x2ad/0x390 [ 1529.858388] __generic_file_write_iter+0x39d/0x5d0 [ 1529.858998] generic_file_write_iter+0xdb/0x230 [ 1529.859563] ? iov_iter_init+0x3c/0x130 [ 1529.860053] new_sync_write+0x42c/0x660 [ 1529.860539] ? new_sync_read+0x6f0/0x6f0 [ 1529.861029] ? __x64_sys_pwrite64+0x201/0x260 [ 1529.861576] ? lock_release+0x680/0x680 [ 1529.862061] ? avc_policy_seqno+0x9/0x70 [ 1529.862553] ? selinux_file_permission+0x92/0x520 [ 1529.863147] ? security_file_permission+0xb1/0xe0 [ 1529.863736] vfs_write+0x7c0/0xb10 [ 1529.864171] __x64_sys_pwrite64+0x201/0x260 [ 1529.864698] ? ksys_pwrite64+0x1b0/0x1b0 [ 1529.865195] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1529.865836] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1529.866466] do_syscall_64+0x33/0x40 [ 1529.866938] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1529.867568] RIP: 0033:0x7f3eb14f5b19 [ 1529.868021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1529.870264] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1529.871208] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1529.872070] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1529.872933] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1529.873803] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1529.874664] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:51:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="020000", 0x3, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:51:59 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x5452, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:51:59 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) mmap(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x10010, r4, 0x438a1000) getsockopt$sock_timeval(r5, 0x1, 0xa, &(0x7f00000000c0), &(0x7f00000001c0)=0x10) 05:51:59 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:51:59 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8914, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 91) 05:52:14 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x5ffff, 0x8001) 05:52:14 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8916, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:14 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x5460, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:14 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:14 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeaffffff, 0x0, 0x0) 05:52:14 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="02000000", 0x4, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:52:14 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfeffffff}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x13, 0xffffffffffffffff, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x10000000) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r0, 0x80, {0x0, r0}, 0x9, 0x1, 0x0, {0x0, 0x0, r5}}, 0xffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1545.437614] loop4: detected capacity change from 0 to 2097152 [ 1545.458650] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1545.460639] EXT4-fs (loop4): group descriptors corrupted! [ 1545.476358] FAULT_INJECTION: forcing a failure. [ 1545.476358] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1545.478970] CPU: 1 PID: 11484 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1545.480431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1545.482154] Call Trace: [ 1545.482714] dump_stack+0x107/0x167 [ 1545.483489] should_fail.cold+0x5/0xa [ 1545.484295] __alloc_pages_nodemask+0x182/0x600 [ 1545.485273] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1545.486530] ? find_get_entry+0x2c8/0x740 [ 1545.487397] ? exc_page_fault+0xca/0x1a0 [ 1545.488247] ? trace_hardirqs_on+0x5b/0x180 [ 1545.489156] alloc_pages_current+0x187/0x280 [ 1545.490071] __page_cache_alloc+0x2d2/0x360 [ 1545.490990] pagecache_get_page+0x2c7/0xc80 [ 1545.491910] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1545.492974] grab_cache_page_write_begin+0x64/0xa0 [ 1545.494002] simple_write_begin+0x30/0x2e0 05:52:14 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffea, 0x0, 0x0) [ 1545.494888] generic_perform_write+0x20a/0x4f0 [ 1545.496101] ? __mnt_drop_write_file+0x9/0x70 [ 1545.497065] ? page_cache_prev_miss+0x310/0x310 [ 1545.498044] ? evict_inodes+0x470/0x470 [ 1545.498888] ? generic_write_checks+0x2ad/0x390 [ 1545.499883] __generic_file_write_iter+0x39d/0x5d0 [ 1545.500920] generic_file_write_iter+0xdb/0x230 [ 1545.501898] ? iov_iter_init+0x3c/0x130 [ 1545.502744] new_sync_write+0x42c/0x660 [ 1545.503584] ? new_sync_read+0x6f0/0x6f0 [ 1545.504444] ? __x64_sys_pwrite64+0x201/0x260 [ 1545.505392] ? lock_release+0x680/0x680 [ 1545.506232] ? avc_policy_seqno+0x9/0x70 [ 1545.507101] ? selinux_file_permission+0x92/0x520 [ 1545.508131] ? security_file_permission+0xb1/0xe0 [ 1545.509166] vfs_write+0x7c0/0xb10 [ 1545.509920] __x64_sys_pwrite64+0x201/0x260 [ 1545.510824] ? ksys_pwrite64+0x1b0/0x1b0 [ 1545.511694] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1545.512807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1545.513883] do_syscall_64+0x33/0x40 [ 1545.514673] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1545.515754] RIP: 0033:0x7f3eb14f5b19 [ 1545.516537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1545.520426] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1545.522048] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1545.523578] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 05:52:14 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8901, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1545.525100] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1545.526808] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1545.528338] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:52:14 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8918, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:29 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x7ffffffff000, 0x0, 0x0) 05:52:29 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:29 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8936, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="02000000", 0x4, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:52:29 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x60fff, 0x8001) 05:52:29 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffb) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:29 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8902, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 92) [ 1559.858034] loop4: detected capacity change from 0 to 2097152 [ 1559.882217] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1559.884129] EXT4-fs (loop4): group descriptors corrupted! [ 1559.885904] FAULT_INJECTION: forcing a failure. [ 1559.885904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1559.888417] CPU: 0 PID: 11510 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1559.889820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1559.891524] Call Trace: [ 1559.892064] dump_stack+0x107/0x167 [ 1559.892815] should_fail.cold+0x5/0xa [ 1559.893597] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1559.894685] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1559.895721] ? simple_write_begin+0x109/0x2e0 [ 1559.896640] generic_perform_write+0x279/0x4f0 [ 1559.897572] ? __mnt_drop_write_file+0x9/0x70 [ 1559.898478] ? page_cache_prev_miss+0x310/0x310 [ 1559.899421] ? evict_inodes+0x470/0x470 [ 1559.900222] ? generic_write_checks+0x2ad/0x390 [ 1559.901173] __generic_file_write_iter+0x39d/0x5d0 [ 1559.902173] generic_file_write_iter+0xdb/0x230 [ 1559.903108] ? iov_iter_init+0x3c/0x130 [ 1559.903926] new_sync_write+0x42c/0x660 [ 1559.904745] ? new_sync_read+0x6f0/0x6f0 [ 1559.905571] ? __x64_sys_pwrite64+0x201/0x260 [ 1559.906490] ? lock_release+0x680/0x680 [ 1559.907303] ? avc_policy_seqno+0x9/0x70 [ 1559.908118] ? selinux_file_permission+0x92/0x520 [ 1559.909107] ? security_file_permission+0xb1/0xe0 [ 1559.910087] vfs_write+0x7c0/0xb10 [ 1559.910806] __x64_sys_pwrite64+0x201/0x260 [ 1559.911681] ? ksys_pwrite64+0x1b0/0x1b0 [ 1559.912502] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1559.913557] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1559.914595] do_syscall_64+0x33/0x40 [ 1559.915348] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1559.916368] RIP: 0033:0x7f3eb14f5b19 [ 1559.917113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1559.920798] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1559.922336] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1559.923771] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1559.925203] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1559.926635] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1559.928065] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:52:29 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x1000000000000, 0x0, 0x0) 05:52:29 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:29 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8940, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:29 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8903, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="02000000", 0x4, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:52:29 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f00000000c0)=0x80) 05:52:29 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x61fff, 0x8001) [ 1560.098569] loop4: detected capacity change from 0 to 2097152 [ 1560.117511] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1560.119291] EXT4-fs (loop4): group descriptors corrupted! 05:52:29 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8904, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 93) 05:52:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x62fff, 0x8001) 05:52:44 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8906, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:44 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:44 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8941, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:52:44 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:44 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x8000000000000, 0x0, 0x0) [ 1575.383007] loop4: detected capacity change from 0 to 2097152 [ 1575.403936] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1575.405912] EXT4-fs (loop4): group descriptors corrupted! [ 1575.410680] FAULT_INJECTION: forcing a failure. [ 1575.410680] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1575.412409] CPU: 1 PID: 11570 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1575.413344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1575.414458] Call Trace: [ 1575.414821] dump_stack+0x107/0x167 [ 1575.415314] should_fail.cold+0x5/0xa [ 1575.415836] __alloc_pages_nodemask+0x182/0x600 [ 1575.416466] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1575.417285] ? find_get_entry+0x2c8/0x740 [ 1575.417839] ? exc_page_fault+0xca/0x1a0 [ 1575.418387] ? trace_hardirqs_on+0x5b/0x180 [ 1575.418972] alloc_pages_current+0x187/0x280 [ 1575.419579] __page_cache_alloc+0x2d2/0x360 [ 1575.420163] pagecache_get_page+0x2c7/0xc80 [ 1575.420754] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1575.421437] grab_cache_page_write_begin+0x64/0xa0 [ 1575.422097] simple_write_begin+0x30/0x2e0 [ 1575.422670] generic_perform_write+0x20a/0x4f0 [ 1575.423291] ? page_cache_prev_miss+0x310/0x310 [ 1575.423932] ? evict_inodes+0x470/0x470 [ 1575.424470] ? generic_write_checks+0x2ad/0x390 [ 1575.425115] __generic_file_write_iter+0x39d/0x5d0 [ 1575.425782] generic_file_write_iter+0xdb/0x230 [ 1575.426405] ? iov_iter_init+0x3c/0x130 [ 1575.426945] new_sync_write+0x42c/0x660 [ 1575.427491] ? new_sync_read+0x6f0/0x6f0 [ 1575.428035] ? __x64_sys_pwrite64+0x201/0x260 [ 1575.428646] ? lock_release+0x680/0x680 [ 1575.429181] ? avc_policy_seqno+0x9/0x70 [ 1575.429722] ? selinux_file_permission+0x92/0x520 [ 1575.430363] ? security_file_permission+0xb1/0xe0 [ 1575.431018] vfs_write+0x7c0/0xb10 [ 1575.431509] __x64_sys_pwrite64+0x201/0x260 [ 1575.432086] ? ksys_pwrite64+0x1b0/0x1b0 [ 1575.432628] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1575.433340] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1575.434049] do_syscall_64+0x33/0x40 [ 1575.434545] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1575.435237] RIP: 0033:0x7f3eb14f5b19 [ 1575.435738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1575.438188] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1575.439214] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1575.440189] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1575.441147] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1575.442098] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1575.443044] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:52:44 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x63fff, 0x8001) 05:52:44 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8907, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:44 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0/../file0\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x6, 0x4007, @fd=r0, 0x9, 0x100, 0x6, 0x0, 0x0, {0x2, r4}}, 0x5) 05:52:44 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:44 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000000000, 0x0, 0x0) 05:52:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:52:44 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x894c, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:44 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0) [ 1575.594049] loop4: detected capacity change from 0 to 2097152 [ 1575.604690] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1575.605887] EXT4-fs (loop4): group descriptors corrupted! 05:52:59 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890c, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040000c00000000000000e2f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:52:59 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf0ff7f00000000, 0x0, 0x0) 05:52:59 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x6c65, &(0x7f0000000040)={0x0, 0x212f, 0x4, 0x1, 0x1fe, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:59 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 94) 05:52:59 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:59 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x64fff, 0x8001) 05:52:59 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8980, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1590.269618] loop4: detected capacity change from 0 to 2097152 [ 1590.290660] FAULT_INJECTION: forcing a failure. [ 1590.290660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1590.291052] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1590.292400] CPU: 1 PID: 11618 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1590.292415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1590.294573] EXT4-fs (loop4): group descriptors corrupted! [ 1590.295453] Call Trace: [ 1590.295472] dump_stack+0x107/0x167 [ 1590.295487] should_fail.cold+0x5/0xa [ 1590.295523] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1590.300232] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1590.300914] ? simple_write_begin+0x109/0x2e0 [ 1590.301526] generic_perform_write+0x279/0x4f0 [ 1590.302146] ? __mnt_drop_write_file+0x9/0x70 [ 1590.302747] ? page_cache_prev_miss+0x310/0x310 [ 1590.303376] ? evict_inodes+0x470/0x470 [ 1590.303928] ? generic_write_checks+0x2ad/0x390 [ 1590.304571] __generic_file_write_iter+0x39d/0x5d0 [ 1590.305234] generic_file_write_iter+0xdb/0x230 [ 1590.305848] ? iov_iter_init+0x3c/0x130 [ 1590.306392] new_sync_write+0x42c/0x660 [ 1590.306926] ? new_sync_read+0x6f0/0x6f0 [ 1590.307475] ? __x64_sys_pwrite64+0x201/0x260 [ 1590.308091] ? lock_release+0x680/0x680 [ 1590.308640] ? avc_policy_seqno+0x9/0x70 [ 1590.309179] ? selinux_file_permission+0x92/0x520 [ 1590.309827] ? security_file_permission+0xb1/0xe0 [ 1590.310478] vfs_write+0x7c0/0xb10 [ 1590.310956] __x64_sys_pwrite64+0x201/0x260 [ 1590.311542] ? ksys_pwrite64+0x1b0/0x1b0 [ 1590.312083] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1590.312776] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1590.313466] do_syscall_64+0x33/0x40 [ 1590.313968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1590.314652] RIP: 0033:0x7f3eb14f5b19 [ 1590.315153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1590.317606] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1590.318620] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1590.319574] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1590.320537] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1590.321475] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1590.322419] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:52:59 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:59 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8981, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:59 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8914, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:52:59 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x3466, &(0x7f0000000040)={0x0, 0x807b, 0x11, 0x1, 0x3b9}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)="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", 0x1000, 0x40004}, 0x1ff) r4 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r4, &(0x7f0000000140)="b2", 0x20000141, 0x8001) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd00fe0000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r5, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0x6) r8 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r8, &(0x7f0000000140)="b2", 0x20000141, 0x8001) io_uring_enter(r8, 0x1533, 0xa799, 0x1, &(0x7f0000000340)={[0x1cb4aa4f]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r4, &(0x7f0000000200)={0x202280, 0x2, 0x1e}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r7}}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6e77, 0x8f19, 0x2, &(0x7f0000000380), 0x8) 05:52:59 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:52:59 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xf0ffffff7f0000, 0x0, 0x0) 05:52:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:52:59 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x65fff, 0x8001) [ 1590.477795] loop4: detected capacity change from 0 to 2097152 [ 1590.502469] EXT4-fs (loop4): unsupported descriptor size 0 05:53:17 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8982, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:53:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 95) 05:53:17 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8916, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:53:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:53:17 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x103, r3}}, 0x2) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x2) io_uring_enter(r5, 0x1b7e, 0x1654, 0x3, &(0x7f0000000080)={[0x200]}, 0x8) io_uring_enter(r0, 0x1da, 0xbf7, 0x2, 0x0, 0x0) 05:53:17 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:53:17 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x100000000000000, 0x0, 0x0) 05:53:17 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x66fff, 0x8001) [ 1608.031818] loop4: detected capacity change from 0 to 2097152 [ 1608.048134] FAULT_INJECTION: forcing a failure. [ 1608.048134] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1608.050771] CPU: 0 PID: 11671 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1608.052270] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1608.054054] Call Trace: [ 1608.054628] dump_stack+0x107/0x167 [ 1608.055421] should_fail.cold+0x5/0xa [ 1608.056258] __alloc_pages_nodemask+0x182/0x600 [ 1608.057266] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1608.058563] ? find_get_entry+0x2c8/0x740 [ 1608.059464] ? exc_page_fault+0xca/0x1a0 [ 1608.060352] ? trace_hardirqs_on+0x5b/0x180 [ 1608.061277] alloc_pages_current+0x187/0x280 [ 1608.062236] __page_cache_alloc+0x2d2/0x360 [ 1608.063178] pagecache_get_page+0x2c7/0xc80 [ 1608.064118] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1608.065216] grab_cache_page_write_begin+0x64/0xa0 [ 1608.066275] simple_write_begin+0x30/0x2e0 [ 1608.067189] generic_perform_write+0x20a/0x4f0 [ 1608.068194] ? __mnt_drop_write_file+0x9/0x70 [ 1608.069162] ? page_cache_prev_miss+0x310/0x310 [ 1608.070162] ? evict_inodes+0x470/0x470 [ 1608.071025] ? generic_write_checks+0x2ad/0x390 [ 1608.072047] __generic_file_write_iter+0x39d/0x5d0 [ 1608.073129] generic_file_write_iter+0xdb/0x230 [ 1608.074133] ? iov_iter_init+0x3c/0x130 [ 1608.075000] new_sync_write+0x42c/0x660 [ 1608.075871] ? new_sync_read+0x6f0/0x6f0 [ 1608.076741] ? __x64_sys_pwrite64+0x201/0x260 [ 1608.077719] ? lock_release+0x680/0x680 [ 1608.078581] ? avc_policy_seqno+0x9/0x70 [ 1608.079461] ? selinux_file_permission+0x92/0x520 [ 1608.080514] ? security_file_permission+0xb1/0xe0 [ 1608.081558] vfs_write+0x7c0/0xb10 [ 1608.082330] __x64_sys_pwrite64+0x201/0x260 [ 1608.083255] ? ksys_pwrite64+0x1b0/0x1b0 [ 1608.084140] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1608.085274] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1608.086389] do_syscall_64+0x33/0x40 [ 1608.087189] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1608.088305] RIP: 0033:0x7f3eb14f5b19 [ 1608.089108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1608.093077] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1608.094720] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1608.096260] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1608.097807] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.099337] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1608.100887] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1608.106547] EXT4-fs (loop4): unsupported descriptor size 0 05:53:17 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x253f, &(0x7f0000000040)={0x0, 0x54ab, 0x8, 0x0, 0x7b, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x800, 0x0, &(0x7f00000001c0), 0x4, 0x0, 0x1, {0x3}}, 0x7) 05:53:17 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:53:17 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8918, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:53:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 96) 05:53:17 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x67fff, 0x8001) 05:53:17 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:53:17 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8983, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:53:17 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0) [ 1608.259842] FAULT_INJECTION: forcing a failure. [ 1608.259842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1608.262479] CPU: 1 PID: 11686 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1608.263931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1608.265722] Call Trace: [ 1608.266280] dump_stack+0x107/0x167 [ 1608.267075] should_fail.cold+0x5/0xa [ 1608.267902] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1608.269024] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1608.270101] ? simple_write_begin+0x109/0x2e0 [ 1608.271046] generic_perform_write+0x279/0x4f0 [ 1608.272024] ? __mnt_drop_write_file+0x9/0x70 [ 1608.272967] ? page_cache_prev_miss+0x310/0x310 [ 1608.273944] ? evict_inodes+0x470/0x470 [ 1608.274781] ? generic_write_checks+0x2ad/0x390 [ 1608.275780] __generic_file_write_iter+0x39d/0x5d0 [ 1608.276817] generic_file_write_iter+0xdb/0x230 [ 1608.277792] ? iov_iter_init+0x3c/0x130 [ 1608.278673] new_sync_write+0x42c/0x660 [ 1608.279529] ? new_sync_read+0x6f0/0x6f0 [ 1608.280407] ? __x64_sys_pwrite64+0x201/0x260 [ 1608.281363] ? lock_release+0x680/0x680 [ 1608.282211] ? avc_policy_seqno+0x9/0x70 [ 1608.283066] ? selinux_file_permission+0x92/0x520 [ 1608.284102] ? security_file_permission+0xb1/0xe0 [ 1608.285129] vfs_write+0x7c0/0xb10 [ 1608.285896] __x64_sys_pwrite64+0x201/0x260 [ 1608.286806] ? ksys_pwrite64+0x1b0/0x1b0 [ 1608.287683] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1608.288803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1608.289889] do_syscall_64+0x33/0x40 [ 1608.290683] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1608.291784] RIP: 0033:0x7f3eb14f5b19 [ 1608.292578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1608.296499] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1608.298114] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1608.299631] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1608.301151] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1608.302665] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1608.304180] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1608.335544] loop4: detected capacity change from 0 to 2097152 [ 1608.349837] EXT4-fs (loop4): unsupported descriptor size 0 05:53:34 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8936, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:53:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 97) 05:53:34 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x68fff, 0x8001) 05:53:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:53:34 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:53:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r6, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) accept4(r3, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x80, 0x800) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r8 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2000, @fd_index=0x5, 0xff, 0x0, 0x0, 0x20, 0x0, {0x2}}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)=ANY=[@ANYBLOB="aa3221ab", @ANYRES16=0x0, @ANYBLOB="01000000000000000000050000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="14000380100003800c0001800800010069000000"], 0x34}}, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000440)={{}, 0x5, &(0x7f0000000400)=[0x55, 0xac, 0x9, 0x5, 0xf7], 0x7fffffff, 0x1, [0x7ff, 0x200, 0x7, 0xead]}) syz_io_uring_setup(0x6330, &(0x7f0000000340)={0x0, 0x1849, 0x10, 0x1, 0xb4, 0x0, r8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r8, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:53:34 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 05:53:34 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:53:34 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1625.678580] loop4: detected capacity change from 0 to 2097152 [ 1625.690580] FAULT_INJECTION: forcing a failure. [ 1625.690580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1625.692303] CPU: 1 PID: 11709 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1625.693257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1625.694397] Call Trace: [ 1625.694760] dump_stack+0x107/0x167 [ 1625.695255] should_fail.cold+0x5/0xa [ 1625.695780] __alloc_pages_nodemask+0x182/0x600 [ 1625.696421] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1625.697242] ? find_get_entry+0x2c8/0x740 [ 1625.697803] ? exc_page_fault+0xca/0x1a0 [ 1625.698356] ? trace_hardirqs_on+0x5b/0x180 [ 1625.698954] alloc_pages_current+0x187/0x280 [ 1625.699560] __page_cache_alloc+0x2d2/0x360 [ 1625.700163] pagecache_get_page+0x2c7/0xc80 [ 1625.700758] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1625.701449] grab_cache_page_write_begin+0x64/0xa0 [ 1625.702128] simple_write_begin+0x30/0x2e0 [ 1625.702701] generic_perform_write+0x20a/0x4f0 [ 1625.703336] ? page_cache_prev_miss+0x310/0x310 [ 1625.703986] ? evict_inodes+0x470/0x470 [ 1625.704526] ? generic_write_checks+0x2ad/0x390 [ 1625.705171] __generic_file_write_iter+0x39d/0x5d0 [ 1625.705836] generic_file_write_iter+0xdb/0x230 [ 1625.706469] ? iov_iter_init+0x3c/0x130 [ 1625.707009] new_sync_write+0x42c/0x660 [ 1625.707547] ? new_sync_read+0x6f0/0x6f0 [ 1625.708105] ? __x64_sys_pwrite64+0x201/0x260 [ 1625.708728] ? lock_release+0x680/0x680 [ 1625.709266] ? avc_policy_seqno+0x9/0x70 [ 1625.709816] ? selinux_file_permission+0x92/0x520 [ 1625.710472] ? security_file_permission+0xb1/0xe0 [ 1625.711131] vfs_write+0x7c0/0xb10 [ 1625.711613] __x64_sys_pwrite64+0x201/0x260 [ 1625.712207] ? ksys_pwrite64+0x1b0/0x1b0 [ 1625.712764] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1625.713472] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1625.714171] do_syscall_64+0x33/0x40 [ 1625.714676] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1625.715368] RIP: 0033:0x7f3eb14f5b19 [ 1625.715876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.718408] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1625.719443] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1625.720423] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1625.721380] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1625.722341] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1625.723311] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1625.730734] EXT4-fs (loop4): unsupported descriptor size 0 05:53:34 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8940, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:53:35 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a1, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:53:35 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xeaffffffffffffff, 0x0, 0x0) 05:53:35 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:53:35 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x69fff, 0x8001) 05:53:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1625.869985] loop4: detected capacity change from 0 to 2097152 [ 1625.894560] EXT4-fs (loop4): unsupported descriptor size 0 05:53:48 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8941, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:53:48 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x3, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, r0, 0x8000000) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)=ANY=[@ANYBLOB='4\x00\b\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000050000000c00018008000100", @ANYRES32=r9, @ANYBLOB="14000380100003800c0001800800010069000000"], 0x34}}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r7, 0x1, 0x53, &(0x7f00000001c0)={0x7, 0x7, 0x4}, &(0x7f0000000280)=0x28) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r11, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="5f40b13110bfdcd2cb28818bc83f71ebc4ad956279b72eecaa98fef2e58eb3a817c01bc33f79257f8eedb6b0eef21b31f2d2a86ef441efeafe42255bfd7be8e9d9f3100c2a5d7b39a9f6062c827f90e542ca3137575292bdf1f627614fb519bc6c347aa54ce09c3b5d38a2ec1d5faf840166f948d0807db44dd6322a9a92f6d6a6479af46d7a5d", @ANYRES16=r12, @ANYBLOB="00082cbd7000fddbdf252b000000050018011f0000000800a10000100000050018012800000008002201ba0000000800a10004000000050018013b0000000800270002000000050019010f000000040008010800a0009f290000080026006c090000080027000300000008002201130000000800a000330c000008009f0006000000050018011d00000004004600080026006c090000080026006c090000"], 0xa4}, 0x1, 0x0, 0x0, 0x24000000}, 0x71baa8b2247727bc) syz_io_uring_submit(r3, r6, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0xa8b33d384b410fe3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="2c2b6bda6271d3e146aca8f8496d9f5b3595c31ad0a3af5e32c756aa2885792c7ae047c2b408", 0x26, 0x40051, 0x1}, 0x9) r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r14 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r13, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r14, 0x80, &(0x7f0000000040)=@llc={0x1a, 0x104, 0x9, 0xd1, 0xfa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x0, 0x0, 0x1}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:53:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x6afff, 0x8001) 05:53:48 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:53:48 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 98) 05:53:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:53:48 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) [ 1639.217186] FAULT_INJECTION: forcing a failure. [ 1639.217186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1639.218588] CPU: 1 PID: 11764 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1639.219406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1639.220372] Call Trace: [ 1639.220690] dump_stack+0x107/0x167 [ 1639.221112] should_fail.cold+0x5/0xa [ 1639.221553] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1639.222160] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1639.222745] ? simple_write_begin+0x109/0x2e0 [ 1639.223262] generic_perform_write+0x279/0x4f0 [ 1639.223789] ? __mnt_drop_write_file+0x9/0x70 [ 1639.224312] ? page_cache_prev_miss+0x310/0x310 [ 1639.224845] ? evict_inodes+0x470/0x470 [ 1639.225305] ? generic_write_checks+0x2ad/0x390 [ 1639.225843] __generic_file_write_iter+0x39d/0x5d0 [ 1639.226403] generic_file_write_iter+0xdb/0x230 [ 1639.226938] ? iov_iter_init+0x3c/0x130 [ 1639.227397] new_sync_write+0x42c/0x660 [ 1639.227856] ? new_sync_read+0x6f0/0x6f0 [ 1639.228330] ? __x64_sys_pwrite64+0x201/0x260 [ 1639.228847] ? lock_release+0x680/0x680 [ 1639.229302] ? avc_policy_seqno+0x9/0x70 [ 1639.229767] ? selinux_file_permission+0x92/0x520 [ 1639.230319] ? security_file_permission+0xb1/0xe0 [ 1639.230874] vfs_write+0x7c0/0xb10 [ 1639.231282] __x64_sys_pwrite64+0x201/0x260 [ 1639.231777] ? ksys_pwrite64+0x1b0/0x1b0 [ 1639.232249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1639.232853] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1639.233441] do_syscall_64+0x33/0x40 [ 1639.233867] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1639.234452] RIP: 0033:0x7f3eb14f5b19 [ 1639.234878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1639.236987] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1639.237855] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1639.238670] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1639.239485] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1639.240304] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1639.241117] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:53:48 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x40049409, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1639.258365] loop4: detected capacity change from 0 to 2097152 [ 1639.267816] EXT4-fs (loop4): unsupported descriptor size 0 05:53:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x6bfff, 0x8001) 05:53:48 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:53:48 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffffea, 0x0, 0x0) 05:53:48 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x40086602, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:53:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:53:48 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1639.457934] loop4: detected capacity change from 0 to 2097152 [ 1639.463965] EXT4-fs (loop4): unsupported descriptor size 0 05:54:05 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffffffffffff, 0x0, 0x0) 05:54:05 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 99) 05:54:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:54:05 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x40087602, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:05 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x6cfff, 0x8001) 05:54:05 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x894c, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:05 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:05 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3c8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r3 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r3, &(0x7f0000000340)="b2d6cdee9a0c7379585e7da9329e3989cdf5dda3543d8f3f7586342c011cdf546d09e225c2c4edeaa0a3b382fcba0de23ec686f2b2de97de7d565e4e6c65ae5857f71bc48489e3773de48a3eaaaa7d41a0bc7915c7de6d71f265a17109197738b9f6367e57eaf821698e8164b7d1111bab2bd77cc7c100269d4db9aaf6620941139fbfc5598538f0710b67de43c3e246524992088a4250939d5030730f0246e0bb9796bda8679093d0533d5780ac13694846211f86dcff846fc1dc550571eca706a965726d62553866cdd6ed956b6fe44d71367f210223eff6fec4147fc25a26a162194d0e", 0xe5, 0x8001) io_uring_enter(r3, 0x354, 0x128a, 0x0, &(0x7f0000000040)={[0x7f]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r8, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x5, 0xffffffffffffff80}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0/file0\x00'}) fcntl$getownex(r9, 0x10, &(0x7f00000001c0)) [ 1656.442682] loop4: detected capacity change from 0 to 2097152 [ 1656.449928] FAULT_INJECTION: forcing a failure. [ 1656.449928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1656.452775] CPU: 0 PID: 11802 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1656.454412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1656.456356] Call Trace: [ 1656.456971] dump_stack+0x107/0x167 [ 1656.457818] should_fail.cold+0x5/0xa [ 1656.458713] __alloc_pages_nodemask+0x182/0x600 [ 1656.459801] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1656.461202] ? find_get_entry+0x2c8/0x740 [ 1656.462178] ? exc_page_fault+0xca/0x1a0 [ 1656.463112] ? trace_hardirqs_on+0x5b/0x180 [ 1656.464138] alloc_pages_current+0x187/0x280 [ 1656.465181] __page_cache_alloc+0x2d2/0x360 [ 1656.466190] pagecache_get_page+0x2c7/0xc80 [ 1656.467198] ? iov_iter_fault_in_readable+0x9a/0x410 [ 1656.468398] grab_cache_page_write_begin+0x64/0xa0 [ 1656.469546] simple_write_begin+0x30/0x2e0 [ 1656.470535] generic_perform_write+0x20a/0x4f0 [ 1656.471610] ? __mnt_drop_write_file+0x9/0x70 [ 1656.472668] ? page_cache_prev_miss+0x310/0x310 [ 1656.473759] ? evict_inodes+0x470/0x470 [ 1656.474687] ? generic_write_checks+0x2ad/0x390 [ 1656.475780] __generic_file_write_iter+0x39d/0x5d0 [ 1656.476953] generic_file_write_iter+0xdb/0x230 [ 1656.478034] ? iov_iter_init+0x3c/0x130 [ 1656.478963] new_sync_write+0x42c/0x660 [ 1656.479887] ? new_sync_read+0x6f0/0x6f0 [ 1656.480832] ? __x64_sys_pwrite64+0x201/0x260 [ 1656.481871] ? lock_release+0x680/0x680 [ 1656.482788] ? avc_policy_seqno+0x9/0x70 [ 1656.483710] ? selinux_file_permission+0x92/0x520 [ 1656.484837] ? security_file_permission+0xb1/0xe0 [ 1656.485941] vfs_write+0x7c0/0xb10 [ 1656.486767] __x64_sys_pwrite64+0x201/0x260 [ 1656.487746] ? ksys_pwrite64+0x1b0/0x1b0 [ 1656.488688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1656.489878] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1656.491050] do_syscall_64+0x33/0x40 [ 1656.491885] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1656.493039] RIP: 0033:0x7f3eb14f5b19 [ 1656.493871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1656.497998] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1656.499707] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1656.501315] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1656.502913] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1656.504526] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000002 [ 1656.506109] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 [ 1656.513446] EXT4-fs (loop4): unsupported descriptor size 0 05:54:05 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:05 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8980, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:05 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2) 05:54:05 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x4020940d, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:05 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) (fail_nth: 100) [ 1656.599454] FAULT_INJECTION: forcing a failure. [ 1656.599454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1656.601917] CPU: 1 PID: 11830 Comm: syz-executor.1 Not tainted 5.10.253 #1 [ 1656.603095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1656.604508] Call Trace: [ 1656.604961] dump_stack+0x107/0x167 [ 1656.605580] should_fail.cold+0x5/0xa [ 1656.606232] iov_iter_copy_from_user_atomic+0x49b/0xdb0 [ 1656.607133] ? grab_cache_page_write_begin+0x7e/0xa0 [ 1656.607988] ? simple_write_begin+0x109/0x2e0 05:54:05 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x6dfff, 0x8001) 05:54:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1656.608761] generic_perform_write+0x279/0x4f0 [ 1656.609743] ? page_cache_prev_miss+0x310/0x310 [ 1656.610537] ? evict_inodes+0x470/0x470 [ 1656.611213] ? generic_write_checks+0x2ad/0x390 [ 1656.612011] __generic_file_write_iter+0x39d/0x5d0 [ 1656.612865] generic_file_write_iter+0xdb/0x230 [ 1656.613631] ? iov_iter_init+0x3c/0x130 [ 1656.614309] new_sync_write+0x42c/0x660 [ 1656.614983] ? new_sync_read+0x6f0/0x6f0 [ 1656.615665] ? __x64_sys_pwrite64+0x201/0x260 [ 1656.616439] ? lock_release+0x680/0x680 [ 1656.617118] ? avc_policy_seqno+0x9/0x70 [ 1656.617812] ? selinux_file_permission+0x92/0x520 [ 1656.618640] ? security_file_permission+0xb1/0xe0 [ 1656.619467] vfs_write+0x7c0/0xb10 [ 1656.620067] __x64_sys_pwrite64+0x201/0x260 [ 1656.620801] ? ksys_pwrite64+0x1b0/0x1b0 [ 1656.621479] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1656.622365] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1656.623236] do_syscall_64+0x33/0x40 [ 1656.623859] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1656.624727] RIP: 0033:0x7f3eb14f5b19 [ 1656.625353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1656.628402] RSP: 002b:00007f3eaea6b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1656.629689] RAX: ffffffffffffffda RBX: 00007f3eb1608f60 RCX: 00007f3eb14f5b19 [ 1656.630865] RDX: 0000000020000141 RSI: 0000000020000140 RDI: 0000000000000003 [ 1656.632049] RBP: 00007f3eaea6b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1656.633949] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000003 [ 1656.635847] R13: 00007ffd8534e86f R14: 00007f3eaea6b300 R15: 0000000000022000 05:54:05 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x80086601, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:05 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:05 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8) [ 1656.692584] loop4: detected capacity change from 0 to 2097152 [ 1656.710834] EXT4-fs (loop4): unsupported descriptor size 0 05:54:05 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x80087601, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:06 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x6efff, 0x8001) 05:54:06 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8981, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x80108906, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae17079301004000", 0x20, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:54:06 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1656.883602] loop4: detected capacity change from 0 to 2097152 [ 1656.892687] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1656.894316] EXT4-fs (loop4): group descriptors corrupted! 05:54:06 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x6ffff, 0x8001) 05:54:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x80108907, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:06 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xea) 05:54:06 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:21 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) 05:54:21 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:21 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 05:54:21 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x280000a, 0x10010, r0, 0x10000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd00fe0000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r5, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="b2", 0x20000141, 0x8001) perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x80, 0x8, 0x5, 0x7, 0x0, 0x4, 0x20940, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x4038, 0x0, 0x1, 0xc, 0x3, 0xff, 0x7, 0x0, 0x1, 0x0, 0x1000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0xfb, 0x9, &(0x7f0000000780)=[{&(0x7f0000000340)="68a94f9ca3c1dab97ec692ad63c108107e6e309202aa7ec80b207d6f2f0833ff19960bc233b945cb26fae4433add3b02b8a9ea91e2607af18ee79a744dfa98dc69a73c3bf06fc58a898d874b74a252d9c5c62b4ffd32f7f0fe157cc2af1c27f428001c61cb2c9cc3b34595515d67d9cb9fb04951cbd336af411c6735e6534ce855ccbd0d325686", 0x87}, {&(0x7f0000000400)="54323027329cf89251da174279511b3bbadd6b83ab0cce7bb168d2a514977a9e8adfdb72d476b0ef857c245375b4657ecaee58cb92ac09d7d6e4925d5028062266cc1d081ddb0ff6633558081f2ff6021179ea9988400584495e8c17de6d2c34913410468156bf59d02669676198c4357c1c2a5aee309227ee974176b2607505af0ef9da48a22dbe5d805a67c4eeb79a581b7cc6114e43575695d9b4778389913c162d3a5872621cebf2e97f92c21efd0da6659f9af468417d77bef2fabf2702598be4ec889898bed441b28c5cb39fe66acdb7bd070a804add3e199ec81908fa7ec2b5a9", 0xe4}, {&(0x7f0000000b40)="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", 0x110}, {&(0x7f0000000880)="793194cd8fc0cd8579b1dce0e89866d3398569adcae8a9023e00f0fa72ca237eff1d6fdf5cd6fc2318387153c7783c81cbd954e3aad482e60a5b4b68f90a2e61a43f384bcf94f4b6860ae6c959fe144f563991ed9c8e4bdae20486fd7b10170621f2cd5a3179a358f1f377ee54ff4a4797f93907fd751ee8349a1cae38413813595aac6ea93da41d6957dc897e0c3c35229a29041e43f8186136def242b8c86c989de641125c972acbd1f83f46139e5b6c514405e69ec60a12c0bc07e391c2dddccf90c63f46487d280a7d0c0f00dcd51b731a0f7d344d0cb384", 0xda}, {&(0x7f0000000980)="84d66328adb59f0bc6a5c4196c59b259d8e780f8984861a70ba062a2806721d14ac4c3ea15a8e292b9e0a1af9e68b5dfc77afd74d24d1193a10f11ddcf46b694601bef65769c97e8235a0c1f29f2da79058c427c0dc3d57ff6ca646495b02f45c2386383246539d0326c1ba5df9dfdf456bdce480e0def08d69e75016348006721171c49d4fc479786353f08a9bd0a54d3145132c77167559ce7f238625a753847e389272ea975ad7bd83ef8ac2561521158f1ff3087ee899bfc82b4357ee2adcf4dfa05601a8f5bd026e03c93865145959425e795678519cc9d404fed53", 0xde}, {&(0x7f0000000500)="8f30608cfc6d3b7906a3188ea277e43306c8571a509acd651d4d7e9a4610f828e7bc22b50eb2fbc71ad382d221d17acf7ee96b8f4d3dc085a1f040345ff89d4fc76ed6a5b4547ba8478b3a17", 0x4c}, {&(0x7f0000000a80)="a9042d86934cd14e01eb87ea64a54a61bfe0dd9e99b7f91e9bd04ae09b97ed1ecb543770f43ce1e6ece4f53f691c6a2835c8a86eb359e0454e715c3444f1489393a79efd6cddd6774424ad030057a0893b3037ffdcdc9db0d65c1726de433199cdf551a2b382c72f41897340f9a330d47752136ea1a7cd3e51bf002baab522ed74c9af637c12534a3062e39a43141f6b8172fc31377c56837e51828c9bfed7e0c11fa434964eb71da7aa09e4c39001615c9cb618b4f099febd248f", 0xbb}], 0x7, 0x10, 0x1, {0x3, r8}}, 0x6) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0xa, 0x2, 0x0, 0x4, 0x0, 0x0, {0x0, r7}}, 0x1) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x5, 0x0, @fd=r9, 0x0, 0x0, 0x0, {0x2000}, 0x1}, 0x6) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:54:21 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8982, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:21 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0xc0045878, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:21 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x70fff, 0x8001) [ 1672.559572] loop4: detected capacity change from 0 to 2097152 [ 1672.575291] EXT4-fs (loop4): unsupported descriptor size 0 05:54:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:54:21 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0xc0045878, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:21 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 05:54:21 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1672.720567] loop4: detected capacity change from 0 to 2097152 05:54:21 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x71fff, 0x8001) 05:54:22 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x0, 0x2a6}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd00fe0000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r5}}, 0x949) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd00fe0000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r8}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r8}}, 0x6) syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x78, 0x0, 0x12345, {0x0, r8}}, 0x3) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1672.791429] EXT4-fs (loop4): unsupported descriptor size 0 05:54:22 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:22 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x8983, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:34 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeaff) 05:54:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x1fff, 0x8001) 05:54:34 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x3) io_uring_enter(r0, 0x48fe, 0xe240, 0x6, &(0x7f0000000040), 0x8) r3 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r3, &(0x7f0000000140)="b2", 0x20000141, 0x8001) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x13, r3, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000013a0011cd00fe0000f80000000a00000053a2bd8267395ca1c354f2819481e5f33db35261a5ef2dca9616daa7fdade808f0b09a70cc6f80d508be13b5d9800b2df5adeac82fd677a5f03fe00e3b462916e687cb6d0f8f89e8a562d9648e8e2e1c180c74396ee954dee405c6770a65251e6b86e7b212b4b42fb9b03ef0448f0455babe121a7f8168be5bbb935036fcc3de455a0a744c72fea7c9a2a1803b49ee1ba7380c619600"/183], 0x14}}, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r6, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r8}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r8}}, 0x6) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r5, 0x0, 0x0, 0xa09c, 0x5, 0x0, {0x0, r8}}, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:34 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:34 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x72fff, 0x8001) 05:54:34 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:34 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0xc0189436, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1685.659029] loop4: detected capacity change from 0 to 2097152 [ 1685.698342] EXT4-fs (loop4): unsupported descriptor size 0 05:54:49 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a1, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:49 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r3 = pidfd_open(0x0, 0x0) r4 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r4, &(0x7f0000000140)="b2", 0x20000141, 0x8001) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x23e4f) syz_io_uring_setup(0xb1d, &(0x7f0000000040)={0x0, 0xf6e9, 0xb0f95b5c12636132, 0x0, 0x18f, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x4000010, r3, 0x10000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r12, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) r13 = dup2(r0, r0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r9, 0x0, 0x0, 0x2, 0x8, 0x1, {0x0, 0x0, r13}}, 0x6) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:54:49 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffea) 05:54:49 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x2fff, 0x8001) 05:54:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x73fff, 0x8001) 05:54:49 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0xc020660b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:49 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:54:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e", 0x10, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1700.462491] loop4: detected capacity change from 0 to 2097152 [ 1700.471262] EXT4-fs (loop4): unsupported descriptor size 0 05:54:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e", 0x10, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:54:49 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x3fff, 0x8001) 05:54:49 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:54:49 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:54:49 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000) [ 1700.583919] loop4: detected capacity change from 0 to 2097152 05:54:49 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x74fff, 0x8001) [ 1700.595288] EXT4-fs (loop4): unsupported descriptor size 0 05:55:06 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x40049409, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e", 0x10, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:55:06 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x75fff, 0x8001) 05:55:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x4fff, 0x8001) 05:55:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x2}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:06 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 05:55:06 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000) 05:55:06 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4004, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0, 0xd}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1716.814458] loop4: detected capacity change from 0 to 2097152 05:55:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x3}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1716.827758] EXT4-fs (loop4): unsupported descriptor size 0 05:55:06 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x40086602, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:06 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) 05:55:06 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x10010, r0, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x1}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r4 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r4, &(0x7f0000000140)="b2", 0x20000141, 0x8001) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x3581, 0x5fda, 0x2, &(0x7f0000000040)={[0x7]}, 0x8) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 05:55:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x5fff, 0x8001) 05:55:06 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x76fff, 0x8001) 05:55:06 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265", 0x18, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:55:06 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x59fff, 0x8001) 05:55:06 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x40087602, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x14}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x6fff, 0x8001) [ 1717.006008] loop4: detected capacity change from 0 to 2097152 [ 1717.039142] EXT4-fs (loop4): unsupported descriptor size 0 05:55:20 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x8fff, 0x8001) 05:55:20 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf0ff7f) 05:55:20 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x77fff, 0x8001) 05:55:20 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r0, 0x10000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd01010000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x200) syz_io_uring_setup(0x97d, &(0x7f0000000340)={0x0, 0x2ced, 0x10, 0x2, 0x65}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000280), &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r7, 0x80, &(0x7f0000000040)=@l2={0x1f, 0xba4, @none, 0x87}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r9}}, 0x6) syz_io_uring_submit(r4, r6, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2004, @fd_index=0x5, 0x100, &(0x7f0000000040)=""/12, 0xc, 0x6, 0x0, {0x0, r9}}, 0x5) 05:55:20 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_enter(r0, 0x27d5, 0xc29a, 0x0, &(0x7f0000000580)={[0xfffffffffffffffd]}, 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r4, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000440)=""/129, 0x81}, {&(0x7f0000001680)=""/229, 0xe5}, {&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000500)=""/107, 0x6b}], 0x7, &(0x7f0000001800)=""/82, 0x52}, 0x0, 0x40000041, 0x0, {0x1, r8}}, 0x6) 05:55:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x4020940d, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265", 0x18, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1731.526877] loop4: detected capacity change from 0 to 2097152 05:55:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x80086601, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:20 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x9fff, 0x8001) 05:55:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x1, '\x00', 0x2}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:20 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r0, 0x10000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd01010000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x200) syz_io_uring_setup(0x97d, &(0x7f0000000340)={0x0, 0x2ced, 0x10, 0x2, 0x65}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000280), &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r7, 0x80, &(0x7f0000000040)=@l2={0x1f, 0xba4, @none, 0x87}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r9}}, 0x6) syz_io_uring_submit(r4, r6, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2004, @fd_index=0x5, 0x100, &(0x7f0000000040)=""/12, 0xc, 0x6, 0x0, {0x0, r9}}, 0x5) 05:55:20 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000) [ 1731.598271] EXT4-fs (loop4): unsupported descriptor size 0 05:55:20 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x78fff, 0x8001) 05:55:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x1, '\x00', 0x3}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:20 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000) 05:55:35 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 05:55:35 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x79fff, 0x8001) 05:55:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265", 0x18, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:55:35 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x80087601, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0xafff, 0x8001) 05:55:35 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r0, 0x10000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd01010000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x200) syz_io_uring_setup(0x97d, &(0x7f0000000340)={0x0, 0x2ced, 0x10, 0x2, 0x65}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000280), &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r7, 0x80, &(0x7f0000000040)=@l2={0x1f, 0xba4, @none, 0x87}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r9}}, 0x6) syz_io_uring_submit(r4, r6, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2004, @fd_index=0x5, 0x100, &(0x7f0000000040)=""/12, 0xc, 0x6, 0x0, {0x0, r9}}, 0x5) 05:55:35 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x1, '\x00', 0x5}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:35 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0xe88, 0x823c, 0x3, &(0x7f0000000040)={[0xff]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x28b2, &(0x7f0000000340)={0x0, 0xaf88, 0x0, 0x2, 0x10f, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000003c0)=0x0) r7 = pidfd_open(0xffffffffffffffff, 0x0) r8 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r8, &(0x7f0000000140)="b2", 0x20000141, 0x8001) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r8, 0x10000000) ioctl$BTRFS_IOC_SNAP_DESTROY(r7, 0x5000940f, &(0x7f0000000680)={{r8}, "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"}) pwrite64(0xffffffffffffffff, &(0x7f0000000140)="b2", 0x20000141, 0x8001) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0x100, 0x23) ioctl$int_out(r7, 0x5462, &(0x7f00000000c0)) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r9, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x6000, @fd=r0, 0x10001, 0x100, 0xb5a, 0x19, 0x1, {0x2, r10}}, 0xffffff17) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1746.462915] loop4: detected capacity change from 0 to 2097152 [ 1746.483112] EXT4-fs (loop4): unsupported descriptor size 0 05:55:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793", 0x1c, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:55:35 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x7afff, 0x8001) 05:55:35 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x80108906, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:35 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x1, '\x00', 0xb}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0xbfff, 0x8001) 05:55:35 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7ffff000) 05:55:35 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r0, 0x10000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd01010000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x200) syz_io_uring_setup(0x97d, &(0x7f0000000340)={0x0, 0x2ced, 0x10, 0x2, 0x65}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000280), &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r6, 0x80, &(0x7f0000000040)=@l2={0x1f, 0xba4, @none, 0x87}, 0x0, 0x0, 0x1, {0x0, r8}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r8}}, 0x6) [ 1746.673964] loop4: detected capacity change from 0 to 2097152 [ 1746.698400] EXT4-fs (loop4): unsupported descriptor size 0 05:55:52 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r0, 0x10000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd01010000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x200) syz_io_uring_setup(0x97d, &(0x7f0000000340)={0x0, 0x2ced, 0x10, 0x2, 0x65}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000280), &(0x7f00000003c0)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r6, 0x80, &(0x7f0000000040)=@l2={0x1f, 0xba4, @none, 0x87}, 0x0, 0x0, 0x1, {0x0, r8}}, 0x4) 05:55:52 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0xcfff, 0x8001) 05:55:52 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r4, &(0x7f0000000140)="b2", 0x20000141, 0x8001) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r4, 0x10000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:55:52 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x80108907, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:52 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeaffffff) 05:55:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x1, '\x00', 0xfc}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793", 0x1c, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:55:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x7bfff, 0x8001) 05:55:52 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r0, 0x10000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd01010000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x200) syz_io_uring_setup(0x97d, &(0x7f0000000340)={0x0, 0x2ced, 0x10, 0x2, 0x65}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) [ 1763.171840] loop4: detected capacity change from 0 to 2097152 [ 1763.180058] EXT4-fs (loop4): unsupported descriptor size 0 05:55:52 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0xc0045878, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793", 0x1c, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:55:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:52 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 05:55:52 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffea) 05:55:52 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0xc0045878, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:55:52 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x7cfff, 0x8001) 05:55:52 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0xdfff, 0x8001) 05:55:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1763.315477] loop4: detected capacity change from 0 to 2097152 [ 1763.321745] EXT4-fs (loop4): unsupported descriptor size 0 05:56:05 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae1707930100", 0x1e, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:56:05 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r0, 0x10000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd01010000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x200) 05:56:05 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0xc0189436, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:56:05 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x7dfff, 0x8001) 05:56:05 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x7ffffffff000) 05:56:05 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:05 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:56:05 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0xefff, 0x8001) [ 1776.009427] loop4: detected capacity change from 0 to 2097152 [ 1776.027217] EXT4-fs (loop4): unsupported descriptor size 0 05:56:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:56:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae1707930100", 0x1e, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:56:20 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = dup(r0) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000340)="b660c4e7405016c07bb4471ad9153e3394db9c3e5b25ce393ad39704a8d0f420cd6743c79320f5335df010d417b0af1e843814bde743789442d00f46e3d50399064e58658e98eafd48c9130fb17380b4e9f3ae2a5355463d930544f193273ae336dd2a8bb422199495c278dbc3a8906a6984d66b213f6edc2e811dfbae2176580b18e163238cadd08b1c2e835fe575e35456ca4b069d28454d11bfe4da227b85b9896e4fadd90ac45aa351ae3fd45d435ff8318584119d4fda8f96957c5ad45732709eef73d2cd2097c99287d62b3b9656b8bd1b33dae2ed", 0xd8, 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r5, &(0x7f00000000c0)=[{&(0x7f00000001c0)="4a19b2322c6626553f43c4d65ba55794267f7a2da0e72bb0105a5985f5ea4533c3614288e83d8db731c7847ee9d9041b7d595cc02a0c98234aa9a00cf691abf0c3dafddff193314e59b7872a09", 0x4d}, {&(0x7f0000000680)="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", 0x1000}], 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000007, 0x11, r4, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:20 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x7efff, 0x8001) 05:56:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0xc020660b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:56:20 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r0, 0x10000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd01010000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) 05:56:20 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x10fff, 0x8001) 05:56:20 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x1000000000000) 05:56:20 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000000000) 05:56:20 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r0, 0x10000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd01010000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1790.974558] loop4: detected capacity change from 0 to 2097152 05:56:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:56:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1791.012851] EXT4-fs (loop4): unsupported descriptor size 0 05:56:20 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x7ffff, 0x8001) 05:56:20 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x11fff, 0x8001) 05:56:20 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = gettid() clone3(&(0x7f000000c040)={0x140941000, &(0x7f0000005800), &(0x7f0000005840), 0x0, {}, &(0x7f00000058c0)=""/76, 0x4c, &(0x7f0000005940)=""/157, &(0x7f0000008300)=[0x0, 0x0, r4, 0x0, 0x0], 0x5}, 0x58) move_pages(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x6) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x2}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:56:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae1707930100", 0x1e, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:56:20 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r0, 0x10000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd01010000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) 05:56:20 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000000000) [ 1791.149272] loop4: detected capacity change from 0 to 2097152 05:56:20 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x80fff, 0x8001) 05:56:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x138}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1791.159344] EXT4-fs (loop4): unsupported descriptor size 0 05:56:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x6}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:56:20 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x12fff, 0x8001) 05:56:20 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r0, 0x10000000) socket$netlink(0x10, 0x3, 0x0) 05:56:20 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:56:20 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000) 05:56:20 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r0, 0x10000000) 05:56:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x13c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:56:20 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x13fff, 0x8001) 05:56:20 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x14}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:56:33 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:56:33 executing program 2: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x42c0, 0x0, 0x0, 0x0, 0x0) 05:56:33 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) 05:56:33 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x14fff, 0x8001) 05:56:33 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf0ff7f00000000) 05:56:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:56:33 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x81fff, 0x8001) 05:56:33 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x300}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1804.460535] loop4: detected capacity change from 0 to 2097152 [ 1804.474759] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1804.475933] EXT4-fs (loop4): group descriptors corrupted! 05:56:33 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xf0ffffff7f0000) 05:56:33 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x500}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:56:47 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x100000000000000) 05:56:47 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x82fff, 0x8001) 05:56:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xb00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:56:47 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x15fff, 0x8001) 05:56:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae1707930100", 0x1e, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:56:47 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x135, &(0x7f0000000040)={0x0, 0xe356, 0x8, 0x0, 0x316, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:47 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) 05:56:47 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x1, '\x00', 0x2}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1817.851442] loop4: detected capacity change from 0 to 2097152 05:56:47 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x1, '\x00', 0xb}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1817.874702] EXT4-fs (loop4): unsupported descriptor size 0 05:56:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x3801}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:56:47 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x16fff, 0x8001) 05:56:47 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x83fff, 0x8001) 05:56:47 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x7ff, 0x0, 0x5, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:56:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae1707930100", 0x1e, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1817.989490] loop4: detected capacity change from 0 to 2097152 [ 1818.014861] EXT4-fs (loop4): unsupported descriptor size 0 05:57:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x84fff, 0x8001) 05:57:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae1707930100", 0x1e, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:57:00 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x2010, r0, 0x8000000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r4, 0x0, &(0x7f0000000680)="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", 0x1000, 0x2000, 0x1}, 0x6) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x6010, r0, 0x10000000) r6 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2a32, 0x7c47, 0x1, &(0x7f00000001c0)={[0x2]}, 0x8) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r13, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) syz_io_uring_submit(r9, r2, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r10, &(0x7f0000000080), 0x0, 0x0, 0x800}, 0x80) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:00 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1={0xfc, 0x1, '\x00', 0xfc}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:00 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000) 05:57:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x3c01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x17fff, 0x8001) 05:57:00 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x6) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1831.410869] loop4: detected capacity change from 0 to 2097152 [ 1831.421284] EXT4-fs (loop4): unsupported descriptor size 0 05:57:00 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:00 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x85fff, 0x8001) 05:57:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x18fff, 0x8001) 05:57:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x3f00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:00 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 05:57:16 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x4000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:16 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:16 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xeaffffffffffffff) 05:57:16 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x86fff, 0x8001) 05:57:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:57:16 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1}, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x19fff, 0x8001) 05:57:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20, 0x307, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="b2", 0x20000141, 0x8001) io_uring_enter(r5, 0x17ae, 0x1f5a, 0x0, &(0x7f0000000040)={[0x8]}, 0x8) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x1afff, 0x8001) [ 1847.660607] loop4: detected capacity change from 0 to 2097152 [ 1847.673354] EXT4-fs (loop4): unsupported descriptor size 0 05:57:16 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:57:17 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x80fe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:17 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:17 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x1bfff, 0x8001) [ 1847.783592] loop4: detected capacity change from 0 to 2097152 05:57:17 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) 05:57:17 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x455e, &(0x7f0000000040)={0x0, 0x2c68, 0x4, 0x3, 0x309, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd00fe0000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r5, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@qipcrtr={0x2a, 0x0, 0x7ffe}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)="475d074c0dd1", 0x6}, {&(0x7f00000003c0)="dccea637b5ee8ea0a31ab28cafb06d7659f25ed86f3d10bdd9ef0be598902ee503ab15947830985f724c1d31c1be09ee3a2570a59f3cab72f4c0406acd8ca6e3785bd5a4516ae5959545c703019165d684", 0x51}, {&(0x7f0000000880)="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", 0x1000}], 0x3}, 0x0, 0x40000, 0x1}, 0xffffff3c) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x14, 0x1, {0x0, r7}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1847.811710] EXT4-fs (loop4): unsupported descriptor size 0 05:57:17 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x87fff, 0x8001) 05:57:17 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x1cfff, 0x8001) 05:57:31 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xc0fe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30323537333639353800"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:57:31 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xb00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:31 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffffea) 05:57:31 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @multicast2}, &(0x7f0000000080)=0xc) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f00000001c0)=@nfc_llcp, &(0x7f00000000c0)=0x80) 05:57:31 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x88fff, 0x8001) [ 1862.448170] loop4: detected capacity change from 0 to 2097152 [ 1862.476091] EXT4-fs (loop4): unsupported descriptor size 0 05:57:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfc00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:31 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x3f00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:31 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:31 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x30, r0, 0x0) r5 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="b2", 0x20000141, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000005, 0x13, r5, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x2010, r0, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080), 0x1, 0x1, 0x0, {0x0, r7}}, 0x6) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x0, 0x1, 0x1ff, 0x8, 0x113, 0xffffffffffff3995}, {0x246b, 0x3, 0xffffffff, 0x4, 0x400000000000000, 0x23}], ['\x00']}) 05:57:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:57:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x1dfff, 0x8001) 05:57:31 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffffffffffff) 05:57:31 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x89fff, 0x8001) [ 1862.656669] loop4: detected capacity change from 0 to 2097152 [ 1862.678130] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 05:57:31 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfe80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:48 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x4000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x8afff, 0x8001) 05:57:48 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0xe524, 0x1, 0x20000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0xfffffffe, 0x400000000000, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffffffffffe65}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_enter(r0, 0x3137, 0xf763, 0x1, &(0x7f00000001c0)={[0x5]}, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r4, 0x800, 0x0, 0x1}, 0x1000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x6491, 0x9b, 0x1, &(0x7f00000000c0)={[0xfffffffffffffff8]}, 0x8) 05:57:48 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x80010, 0xffffffffffffffff, 0x8000000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd00fe0000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r5, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0x6) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x81, 0x3, 0x1, {0x0, r7}}, 0x9) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:48 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfec0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:48 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:57:48 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x1efff, 0x8001) [ 1879.000816] loop4: detected capacity change from 0 to 2097152 [ 1879.016901] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 05:57:48 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:48 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x80fe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:48 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x1ffff, 0x8001) 05:57:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:57:48 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xff00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:57:48 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x74) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000080)={r1, 0x0, 0x5, 0xc7e}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r5, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:48 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:57:48 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x8bfff, 0x8001) [ 1879.205610] loop4: detected capacity change from 0 to 2097152 [ 1879.238642] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 05:58:03 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000008, 0x100010, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) 05:58:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:03 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x8cfff, 0x8001) 05:58:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20fff, 0x8001) 05:58:03 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xc0fe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:03 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0xfffffffc, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}, {0x0, 0xffffffb5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x4}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:03 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1894.551108] loop4: detected capacity change from 0 to 2097152 [ 1894.571827] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 05:58:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:58:03 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfc00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:03 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x80010, r0, 0x8000000) io_uring_enter(r0, 0x3743, 0xa4d7, 0x1, &(0x7f0000000280)={[0x800]}, 0x8) r5 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r9}, './file0\x00'}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=0x80, &(0x7f0000000080)=@generic, 0x0, 0x80000, 0x0, {0x0, r10}}, 0xef) 05:58:03 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1894.732846] loop4: detected capacity change from 0 to 2097152 [ 1894.741040] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 05:58:03 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x21fff, 0x8001) 05:58:03 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r4, &(0x7f0000000140)="b2", 0x20000141, 0x8001) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000340)="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") io_getevents(0x0, 0x4, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)) 05:58:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x2000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:19 executing program 2: r0 = syz_io_uring_setup(0x1c25, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}, 0x8001) creat(&(0x7f0000000040)='./file0\x00', 0x100) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000000140)=""/8, 0x8) 05:58:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x22fff, 0x8001) 05:58:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:58:19 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfe80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:19 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x8dfff, 0x8001) 05:58:19 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x3000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:19 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 1909.889793] loop4: detected capacity change from 0 to 2097152 [ 1909.908063] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 05:58:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x5000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:19 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x8efff, 0x8001) 05:58:19 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfec0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:19 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)=0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x23fff, 0x8001) 05:58:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:58:19 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x8) syz_io_uring_setup(0x5e18, &(0x7f0000000040)={0x0, 0x55ec, 0x2, 0x1, 0x92}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:19 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000003c0)={0x0, 0xe26a, 0x10, 0x2, 0x10b, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r12 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r13, r14, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r15 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r12, 0x0) syz_io_uring_submit(r15, r14, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r14, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r8, 0x200, 0x0, 0x5, 0x2, 0x1}, 0x5) syz_io_uring_submit(r7, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x6000}}, 0x6) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xb000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:19 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xff00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1910.128692] loop4: detected capacity change from 0 to 2097152 [ 1910.184254] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 05:58:19 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x1000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x38010000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:19 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:19 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x24fff, 0x8001) 05:58:19 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1910.355323] loop4: detected capacity change from 0 to 2097152 [ 1910.366301] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 05:58:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x25fff, 0x8001) 05:58:34 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x8ffff, 0x8001) 05:58:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:58:34 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x3c010000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1924.867610] loop4: detected capacity change from 0 to 2097152 05:58:34 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000040)=""/136, 0x88}], 0xa}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:34 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r6 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r6, &(0x7f0000000140)="b2", 0x20000141, 0x8001) openat(r6, &(0x7f00000000c0)='./file0\x00', 0x200, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003, 0x10, r0, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x4, 0x2000}, 0x101) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:34 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x2000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:34 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:34 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xb000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1924.939293] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 05:58:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x26fff, 0x8001) 05:58:34 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x3f000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:34 executing program 6: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:34 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x90fff, 0x8001) 05:58:34 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x3f000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:34 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x225a, 0xe7fa, 0x0, &(0x7f0000000040)={[0xd0]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:55 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x91fff, 0x8001) 05:58:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:55 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) shmat(r3, &(0x7f0000ffe000/0x1000)=nil, 0x4000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x1, 0x1, 0x1}, 0x9bb9) r5 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r5, 0x0) syz_io_uring_submit(r8, r7, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x9, 0x100000000, {}, 0x7fff, 0x1, 0x1}, 0x8fd2) syz_io_uring_submit(r8, r2, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x100, 0x0, {0x0, r9}}, 0x4) syz_io_uring_setup(0x3370, &(0x7f00000001c0)={0x0, 0xf614, 0x20, 0x2, 0xa7, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r10, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r11 = shmget(0x3, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) shmat(r11, &(0x7f0000ffe000/0x1000)=nil, 0x2000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:55 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:55 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:55 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x27fff, 0x8001) 05:58:55 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r4, &(0x7f0000000140)="b2", 0x20000141, 0x8001) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10010, 0xffffffffffffffff, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, r4, 0x10000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd00fe0000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r7, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r9}}, 0x6) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r9}}, 0x4) io_uring_enter(r4, 0x54f5, 0x19e9, 0x1, &(0x7f0000000040)={[0x40]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:58:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1946.443748] loop4: detected capacity change from 0 to 2097152 [ 1946.459654] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) 05:58:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfc000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:58:55 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:12 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:12 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfc000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:12 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfe800000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x28fff, 0x8001) 05:59:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:59:12 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x92fff, 0x8001) 05:59:12 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000040)={[0xfffffffffffffdac]}, 0x8, 0x80000) 05:59:12 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x10, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1963.156032] loop4: detected capacity change from 0 to 2097152 [ 1963.199638] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) 05:59:12 executing program 6: r0 = syz_io_uring_setup(0x1c29, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:12 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfec00000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:12 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x29fff, 0x8001) 05:59:12 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfe800000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:12 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) socketpair(0xf, 0x4, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r2, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x2, 0x6007, @fd=r8, 0x1, &(0x7f0000000340)="e9ecb9cd595a5b11dbf40c4f90f6eeb1eabafa534ff6d5a095c1223a77d5dbf069b553084f1df0e41953936ec2b779b19a8abbcde87ebd42afeeee6e659853a000088cadfb2aa4444149adade8d2ff1e3f2b37be8d3d9a6ff5c73a0dc78057371a5503dbbabf4ca61b26e338e0cbefbf2f329e886c444f77c2402904334101028510247016d258dcb4cc09d233c0e847cdfc3a77b2e48c6302bdc0e25248406fc4a7fc02cd55dfb7a5d0ec6d4a56bc1569b86fd29457ca7530270b67979ce7a1a731c0340b7de0", 0xc7, 0xcc493d5af91a88cf}, 0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000009, 0x110, r0, 0x0) r9 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000440)={0x100000001, 0x0, 0x2, 0x7f, 0x3, [{0x0, 0x3, 0x1, '\x00', 0x2000}, {0x4003, 0xff, 0x80000001, '\x00', 0x2201}, {0x4, 0x7fff, 0xff, '\x00', 0x81}]}) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) syz_io_uring_submit(r12, r11, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r13 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x5, 0x28000) syz_io_uring_submit(0x0, r11, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r13, 0x0, &(0x7f00000001c0)='./file0\x00', 0x120, 0x0, 0x23456}, 0x5) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:12 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x40010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xc29, &(0x7f0000000040)={0x0, 0xea4e, 0x8, 0x1, 0xf9, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 05:59:12 executing program 6: r0 = syz_io_uring_setup(0x1c29, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:12 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x93fff, 0x8001) 05:59:12 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 1963.396151] loop4: detected capacity change from 0 to 2097152 [ 1963.422875] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) 05:59:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x2afff, 0x8001) 05:59:27 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xff000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x94fff, 0x8001) 05:59:27 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) r3 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000010, 0x20010, r4, 0x0) pwrite64(r3, &(0x7f0000000140)="b2", 0x20000141, 0x8001) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x268000, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x4) clock_gettime(0x7, &(0x7f0000000040)) semtimedop(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x6, 0x2800}, {0x4, 0x2, 0x800}, {0x2, 0x4, 0x1000}], 0x3, &(0x7f0000000280)={0x77359400}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:27 executing program 6: r0 = syz_io_uring_setup(0x1c29, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a", 0x90, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:59:27 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001d40)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) io_uring_enter(r3, 0x5ac6, 0x3bc3, 0x2, &(0x7f0000001fc0)={[0x7]}, 0x8) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000040)="a779cf7edb9da7ff44f7ec49b4cb0924ed0b14399092239745aabde236c72cb45e2988b927c7e95d684303d7c3337ee0e0072cdfe6be69c73e31b46e77d73b2ee701954f9b146e0f07ef73", 0x4b}, {&(0x7f0000000340)="0f8d75cdff4e8b1989d7162636d0499770dcbedc2db28af52d1828c2cf9bd5f7e92f9381e30fddfc72d04326a1ce42668ebab08db39ebb9c0fcf97185644dcb8109f6c06619cd804008997acfbc8dd0875a6698a126a8664029a7091076c810bb79acaa2fee0c57bc96e174f155997714cd24f33158892e3e6d562cbac5e8580f6f73b240f1c07bc2d86636f7549f7f1097bb86e016ed845b4", 0x99}, {&(0x7f0000000400)="fe0f1bee3cc10553c434f717154ec200123d744e49f13d7f2edc4bff8a437e978b706179101c48ba2e81e78a8262de9d146a0878005880ebd0ad8bd504fec8de764a5d0007668d52bfa101c7a90c9a2d245658d82f767bf9e5963d89f1f33285421caa80fa92aada913702c98d8e0bac6263ff3d579cf50616cfdc483ce0f657ba295b14ba7725cbd5829716b4ff065b30efb614e0ecd386224523011d55ed0f92398d2d40e4c67c633867d9f25fd6f681f3b0b494f6", 0xb6}, {&(0x7f00000004c0)="04f454285a0b3591fb03ac170989b4f4d2d9de0901810395459589d8ab2c9e172d2b2219ba462dd65186f56ef039b374d9f6692b622d6fec244af10eacf4f4b1f1d5af9776834d51578b55937a550b505e8ac0b03506ff20b998a87014c4b73a6720899f889da2e51a68fbf2b3c348198b7889e3e6264616e5289aa19d36b9c7165d4752b3427eb5b008ee38e0b54774cedfbf3b85dee95a9067fc7c61a7", 0x9e}, {&(0x7f00000000c0)="6fd0aa3a1a8f47a37a8ce98314244762d4cbc4d5e9bd3ed4e045cba10b79586cd4aac8d285f8f6162f09", 0x2a}, {&(0x7f0000000680)="0a40a662ffe0828ab33af0f188c818a1ae85fc4a81741c430a33f32335f4c1f3ff6609038cc95c87a27d0a10c95b28e65bcbff4cd5e8f94f49806d8cc04209c42ff7291e7d2c3e804206da927488d6e6b6667fc706f631c3519e6a3d7eb96b2c10aef4299df35de1e7fc19b715af1f7eec5130760639c37a83b3c8dc5b907bb355918af5d5392e237e152e6001fbfd056775d7c38d5b21c60d6ba2c450423bb7c298ffe3e9f7b7", 0xa7}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="e01121faddb451bb88768f7ac74d3c5a98a33922610939583ce97cd4bae2ec0add931af77e93d06061a68b1fc725ba144ed054c29f06a78bcc3fcbda1a1efeb26675c0fb6358df9e5667744dfbfc2d41b2c4249eae5b71e4dae639a4b5e8b8fe6067acd65d6e7a3700580c62a893d4df4cc5f676deb009e7032000c0e607e1b4d08f75441c76d958fb398648745212c6480dbc5ca5bd1bf94de99cee0debe56bd03108484d46968d", 0xa8}, {&(0x7f0000000140)="98bd2a93208f2c1155142628503780900f9e7730e688d0", 0x17}, {&(0x7f0000001800)="7649e77a2af662fbfa7fccfa562478cb4d5c96a4742214c1856babc042844ad13adab5e57f169a2181c6381a8c271f62ed6c2ae1597d885c464cdb7373a38b23aa255587e62ca9a6d3812c1fad7d694507b5d1a111ea2f41f5c4670f02ceb79c80ce0422021f2f339b3b62f1779ae67c1ac0c434730b1c0dfcba086390f4b74f2b32b7c6c36d65a0363851fcb81138153627c1b9009fee0b775bed69cb2a81a99ccca921931b16538ed7b7e48f59ea6d1292bb8526e55bfec3d4feb1ff4768bea24ec0521fcdf7478d259e49af149217ee90560111e0b30f", 0xd8}], 0xa, &(0x7f00000001c0)=[@mark={{0x14, 0x1, 0x24, 0x200}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000019c0)="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", 0xfb}], 0x1}}, {{&(0x7f0000001ac0)=@l2tp6={0xa, 0x0, 0x1f00b8db, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x1}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)="820481e3763e31d10c7d80e4385df4a72f3853a8647f219180163e4b", 0x1c}], 0x1, &(0x7f0000001b40)=[@mark={{0x14, 0x1, 0x24, 0x500}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}}, {{&(0x7f0000001b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x4, {0xa, 0x4e22, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="f87b6d0f4b0266cfa78c40ca6cea79e18b91ba6485295df3c69880abac32269458c1c41f908ee23facfb8e9a042c", 0x2e}, {&(0x7f0000001c40)="e087f8f7a23894c22278bc5dffafe2f6605b8a0b59e6160cb2ce9a7233a28a2de5e503f23e02a7676d2c53a83cc13bb2c3bd1112a11cf3de6d839b1e4e973c442542c1ae12b845e65d646a540a2901136ab6830d0bfdbea157679aca03b2f0cd35964077e12a7939903ad911dcea3a3a3c24a2546a4356a1b16e86bef6aac730f8cb75e238853a6589178f7828fc277a0f116493af8859dd90568b37335827f4ce36feae108618ee5827f1057771baf8bcc59b5cbd1880362ab484dfbf04b691e775afbf7430", 0xc6}, {&(0x7f0000001d40)}, {&(0x7f0000001d80)="0226120dc8a1d566e3d3cc56fe8d05c782db", 0x12}], 0x4, &(0x7f0000001e00)=[@mark={{0x14, 0x1, 0x24, 0x5f}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x10001}}], 0xa8}}], 0x4, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x54, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x24040848}, 0x40040080) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:27 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfec00000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 1978.722611] loop4: detected capacity change from 0 to 2097152 05:59:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:28 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r3, &(0x7f0000000140)="b2", 0x20000141, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x3, 0x2010, r3, 0x0) io_uring_enter(r0, 0x3777, 0x2033, 0x3, &(0x7f0000000040), 0x8) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x1000001, 0x30, r3, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0xb, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x24, 0x502480, 0x12345}, 0x9) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x4, 0x6000, @fd=r6, 0x9, &(0x7f0000000080)="24e12130449222a15ef601ea96d116471d75c96b09ef180943fe8032c3128f757b", 0x21, 0x10, 0x1, {0x0, r7}}, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:28 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1978.782297] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1978.784478] EXT4-fs (loop4): group descriptors corrupted! 05:59:28 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x95fff, 0x8001) 05:59:28 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xff000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:28 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x96fff, 0x8001) 05:59:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x2bfff, 0x8001) 05:59:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:59:28 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:42 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x56eb, &(0x7f0000000340)={0x0, 0x2b13, 0x10, 0x2, 0x6, 0x0, r0}, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000280)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r7, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000003a0011cd00fe0000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5", @ANYRES16], 0x14}}, 0x0) r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r8, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r10}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r10}}, 0x6) syz_io_uring_submit(0x0, r3, &(0x7f0000000c40)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r4, 0x0, &(0x7f0000000c00)={&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000440)=""/21, 0x15}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000540)}, {&(0x7f0000000680)=""/84, 0x54}, {&(0x7f0000000580)=""/57, 0x39}, {&(0x7f0000000c80)=""/265, 0x109}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/90, 0x5a}, {&(0x7f0000000980)=""/123, 0x7b}, {&(0x7f0000000a00)=""/215, 0xd7}], 0xa, &(0x7f0000000bc0)=""/24, 0x18}, 0x0, 0x20, 0x1, {0x2, r10}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 05:59:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x2cfff, 0x8001) 05:59:42 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x97fff, 0x8001) 05:59:42 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r3 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r3, &(0x7f0000000140)="b2", 0x20000141, 0x8001) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="5fb49f70d7f0bd140000003a0011cd00fe0000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22776ec6a5261a501004aae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x1c308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r4, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r6}}, 0x6) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:42 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:59:42 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x2dfff, 0x8001) [ 1993.159652] loop4: detected capacity change from 0 to 2097152 [ 1993.172969] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) 05:59:57 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:57 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)="497a33acda43ebe864137c9845929daca2a17a6f6344114eb727917229bbae319f5e34caa2e48abddc8bb02f9c36a480e0d27555c1db3f673815f01b2ef801173c7aee6dfd24b44458671414d60fae4fd6d557f9b59298145a02926be9d095591a826b07ce6a", 0x66, 0x20000040, 0x204f5751c10d3b14, {0x0, r5}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x2efff, 0x8001) 05:59:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:59:57 executing program 0: r0 = syz_io_uring_setup(0x756b, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r6, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/234, 0xea}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000440)=""/180, 0xb4}, {&(0x7f0000001680)=""/247, 0xf7}], 0x5, &(0x7f0000000500)=""/175, 0xaf}, 0x0, 0x104, 0x0, {0x1}}, 0x1) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x300000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:57 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x98fff, 0x8001) [ 2008.504742] loop4: detected capacity change from 0 to 2097152 [ 2008.525263] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) 05:59:57 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x500000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xb00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:57 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r0, 0x4, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x10}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r4, 0x80, &(0x7f00000001c0)=@llc={0x1a, 0x1b, 0x9, 0x7a, 0x9, 0xf2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x0, 0x0, 0x1}, 0x3d2) r5 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="b2", 0x20000141, 0x8001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, r5, 0x8000000) io_uring_enter(r0, 0x3661, 0xfbfd, 0x0, &(0x7f0000000280)={[0x4]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x2ffff, 0x8001) 05:59:57 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x99fff, 0x8001) 05:59:57 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000, 0x1}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, 0x1010, r0, 0x10000000) 05:59:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d2420100128300"/120, 0x78, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) [ 2008.658050] loop4: detected capacity change from 0 to 2097152 [ 2008.665184] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 2008.666766] EXT4-fs (loop4): group descriptors corrupted! 05:59:57 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)=""/186, 0xba}, {&(0x7f0000000080)=""/32, 0x20}, {&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f0000000680)=""/113, 0x71}, {&(0x7f0000000700)=""/154, 0x9a}], 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x2004, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x8cc) r3 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r3, &(0x7f0000000140)="b2", 0x20000141, 0x8001) r4 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff81, 0x3, &(0x7f0000000a00)=[{&(0x7f0000000840)="f5736893498246b89c4b31bfe6b05ad15882c23eb70036873ab234bcb2699aa2df6d5ae00f3a7cc9baab7f53d9190d092a674351803efb7e685647ae5b8d9c1438ebf7b9108f16175b3eb9fbd81428c038715f5079800b3861a3d66bfea28e28e1b6a34235960c8d141ce8ebf69a940448a60752cbfcc64d2324fd038fa6bf3257c9738c233218abc2e66eb95642df98fb60b8d37ec7101f9bb0dd47c8154df024c16b41e569fd96d181048ac92f45b7d919051d4e4aec289f91b96ecf2e2867100acbee2f", 0xc5, 0x401}, {&(0x7f0000000940)="29e23e063162e58e5655363b5ddbf76638db122536b57a0bddcfdefec5e5a0aa62e2a7884d33449a0058020376279647f1fee248711d8adb028af9b86b166809c5b755180497057e9254d2f549a473ac5da10cb40be3ad08a64cf2c3c2a379178f7fea2082451164782d9bf71601c49e6f5dfd52af2d0a33accbd400733437db7c5be8af2be3f7e008368a4b53ab", 0x8e, 0x6f57}, {&(0x7f0000000280)="89bdcd99a92d360bdd2740e46cbe5b97bf483604be", 0x15, 0x6}], 0x888, &(0x7f0000000a80)={[{@utf8no}, {@fat=@errors_remount}, {@shortname_lower}, {@utf8no}], [{@euid_gt}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@fowner_lt={'fowner<', 0xee01}}, {@appraise_type}, {@obj_user={'obj_user', 0x3d, '#|!'}}]}) r5 = open(&(0x7f0000000b40)='./file0\x00', 0x40080, 0x20) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000b80)=[r0, r4, r5, r0], 0x4) r6 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r8, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x4, 0x3, 0x0, 0x42a8, 0x1}, 0xfff) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x3f00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:57 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xb00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:57 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x4000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 05:59:58 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x5642, &(0x7f0000000040)={0x0, 0xade3, 0x2, 0x3, 0x395}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:59:58 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x3801000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 05:59:58 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x30fff, 0x8001) 05:59:58 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x9afff, 0x8001) [ 2008.860650] loop4: detected capacity change from 0 to 2097152 [ 2008.879269] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) [ 2022.648917] loop4: detected capacity change from 0 to 2097152 06:00:11 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:11 executing program 0: r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x20000141, 0x8001) r1 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r1, &(0x7f0000000140)="b2", 0x20000141, 0x8001) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="000080670517c98b212c970000000000002e2f66696c65302f66696c653000"]) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000000c0)=0x10000) r3 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:11 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x9bfff, 0x8001) 06:00:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x31fff, 0x8001) 06:00:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 06:00:11 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x3c01000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:11 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r3 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r3, &(0x7f0000000140)="b2", 0x20000141, 0x8001) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r8}}, 0xfffffffd) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r3, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) 06:00:11 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:11 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x3f00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 2022.672932] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) 06:00:11 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x4000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:11 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x400) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002300000000000000050000000c00fb4e08000100", @ANYRES32=r5, @ANYBLOB="14000380100003800c0001800800010069000000"], 0x34}}, 0x0) r7 = timerfd_create(0x5, 0x80800) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3, r7, 0xffffffffffffffff, 0xffffffffffffffff], 0xa) r8 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r8, 0x0) syz_io_uring_submit(r11, r10, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r8, 0x58ab, 0x0, 0x0, 0x0, 0x0) r12 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r12, &(0x7f0000000140)="b2", 0x20000141, 0x8001) sendmsg$OSF_MSG_ADD(r12, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)={0x710, 0x0, 0x5, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [{{0x254, 0x1, {{0x2, 0xe6}, 0x0, 0x1, 0x870f, 0x7, 0x1b, 'syz1\x00', "c067df8428c37fe4a4d00fbe622d9021ae6604d5117adde6ffa03cc6a06dbd6f", "4bf5289bf7a140140bfadc815a55a8acd6907071cdc6face68ab68b2dbdf22b0", [{0xb9, 0x1, {0x1, 0x4}}, {0x3ff, 0xb5a, {0x1, 0x7}}, {0x8001, 0x5, {0x0, 0xcca}}, {0x0, 0x1e, {0x2, 0x8}}, {0x5, 0x9, {0x1, 0x9}}, {0x101, 0x6, {0x3, 0x5}}, {0x100, 0xfffe, {0x3, 0x101}}, {0x3, 0x6, {0x2, 0x9d}}, {0xffc1, 0x9, {0x3, 0x3c8f27b6}}, {0x9, 0xe7, {0x0, 0xfffffffc}}, {0x4, 0x6, {0x1, 0x6}}, {0x9be3, 0x6, {0x1, 0x9}}, {0x5, 0xff, {0x3, 0x8}}, {0x3ff, 0x3ff, {0x0, 0x4}}, {0x800, 0x2, {0x1, 0x4}}, {0x4, 0x8001, {0x2, 0x2}}, {0x7, 0x6, {0x0, 0x6}}, {0x8001, 0x1, {0x2, 0x9}}, {0x7f, 0x4, {0x0, 0x7}}, {0x6, 0x7f, {0x1, 0x9f}}, {0x7d, 0xb06, {0x1, 0x2ff}}, {0x8, 0xff, {0x2, 0x3ff}}, {0x3, 0x5, {0x0, 0xffffff2b}}, {0x0, 0x3, {0x2, 0x9}}, {0x5, 0x7, {0x1}}, {0x3ff, 0xa0, {0x1, 0x7ff}}, {0x1f, 0x3ea5, {0x1, 0x2}}, {0x3, 0x800, {0x2, 0x3}}, {0x2, 0x52e8, {0x3, 0x90}}, {0x200, 0x666c, {0x3, 0x7}}, {0x2400, 0x8, {0x3, 0x8}}, {0x7, 0xfff, {0x0, 0x80000000}}, {0x200, 0x5, {0x1, 0x5}}, {0x36b7, 0x7fff, {0x0, 0x100}}, {0x6, 0xfffa, {0x2, 0x8000}}, {0x9, 0x12d, {0x1, 0x7ff}}, {0xd1d9, 0x9, {0x3, 0x5}}, {0x8, 0x0, {0x1, 0x6}}, {0xffff, 0x5, {0x1, 0x2}}, {0x7cc8, 0x2, {0x1, 0xa3b}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0x2, 0x5, 0xff, 0x4, 0x6, 'syz0\x00', "b925d6eb1b6e9bae5f2019dcc03523242ecab7851c8691f3c4bab118d24ba17f", "9c39719dbdfe41c3b0ba99ea4601ff11c64615eb0a82fd99beac6e97b38a4a23", [{0x3ff, 0x40, {0x2, 0x5b9}}, {0x800, 0x4104, {0x2, 0xf4}}, {0x2, 0x80, {0x2}}, {0x5, 0x0, {0x2, 0x7}}, {0x400, 0x3, {0x3, 0x1000}}, {0x101, 0x1, {0x2, 0x154c0000}}, {0x8000, 0x0, {0x2}}, {0xff2b, 0x4, {0x3, 0x8000}}, {0x800, 0x101, {0x4, 0x8412}}, {0x9, 0x7fff, {0x0, 0x8}}, {0xfffe, 0x5, {0x2, 0x7}}, {0x0, 0xff, {0x3, 0x6f65}}, {0x3, 0x3, {0x0, 0x9d9}}, {0x5e00, 0xed6, {0x3, 0x2}}, {0x9, 0xfffb, {0x1, 0x1}}, {0x20, 0x5, {0x2, 0x5}}, {0x5, 0x52b0, {0x1, 0x400}}, {0x7, 0x4, {0x1, 0x1}}, {0x6, 0x401, {0x1, 0x9}}, {0xffff, 0x8000, {0x3, 0x80000001}}, {0x20, 0x3, {0x2, 0xa2d}}, {0x5, 0x31ce, {0x1}}, {0xd3dc, 0x6, {0x2, 0x4c1d}}, {0x4, 0x0, {0x2, 0x401}}, {0x3, 0x7, {0x3, 0xe00000}}, {0x9, 0x5, {0x0, 0x1000}}, {0x1, 0x0, {0x8df6dc232b6aa4a, 0x9}}, {0x9, 0x2b7, {0x3, 0xffff}}, {0x0, 0xffbb, {0x0, 0x8}}, {0x6, 0xaff3, {0x0, 0x5}}, {0x1000, 0x1, {0x3, 0x5}}, {0x1d9f, 0x7fff, {0x3, 0x3}}, {0x0, 0x9, {0x0, 0x7}}, {0x0, 0x6, {0x3, 0x8000}}, {0x2, 0x400, {0x0, 0x1}}, {0x7, 0x0, {0x0, 0xfffeffff}}, {0x5, 0x1, {0x2, 0x4}}, {0xfff8, 0x0, {0x2, 0x8}}, {0xffff, 0x6, {0x0, 0x7}}, {0x3, 0x7f, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x80000000}, 0x5, 0x7, 0xe4e, 0x8, 0x22, 'syz0\x00', "10d5c7502480dd1be146143da9a0e965e52a272951b7d96c6bafcc9ece700f53", "604da60bf5ee29a7bb1eac70f9b363138f8276a6dbdc8b4e11439261f226835a", [{0x400, 0x8000, {0x0, 0xfff}}, {0x5, 0x9, {0x0, 0xffffffff}}, {0x8, 0xc58, {0x3, 0x1}}, {0x8, 0x68, {0x1, 0x8}}, {0x3, 0xfffa, {0x3, 0x2309da47}}, {0x3, 0x6, {0x1, 0x1}}, {0x3f, 0x2, {0x0, 0x6}}, {0x0, 0x4ace, {0x2, 0x80000000}}, {0x3ff, 0x5, {0x3, 0x200}}, {0x91, 0xce3, {0x2}}, {0x0, 0x1, {0x3, 0x3f}}, {0x4000, 0x3, {0x1, 0x7}}, {0x800, 0x5, {0x2, 0xd27}}, {0x6, 0x400, {0x1, 0x35d}}, {0x2ef, 0xf80, {0x2, 0x5}}, {0x1, 0x8, {0x2, 0x800}}, {0xedf9, 0xfffb, {0x2b1acf27c604135d, 0x8001}}, {0x800, 0x89, {0x2, 0x7}}, {0x6b2, 0x3f, {0x0, 0x8001}}, {0x0, 0x8a, {0x3}}, {0x1000, 0x100, {0x0, 0x9}}, {0x0, 0x3, {0x0, 0x3}}, {0x3, 0x1000, {0x0, 0x1}}, {0x5, 0x6, {0x3, 0xd9}}, {0xa4, 0x3, {0x2, 0x6}}, {0x3b5, 0x7ff, {0x3, 0x3}}, {0x7, 0x0, {0x3, 0x1}}, {0x81, 0x7, {0x2, 0x4}}, {0x600, 0x81, {0x3, 0x6}}, {0x100, 0x5, {0x3, 0x1}}, {0x2, 0x8, {0x0, 0x101}}, {0x6, 0x20, {0x0, 0x2}}, {0x4e9, 0x0, {0x1, 0x8}}, {0x7d47, 0x610e, {0x2}}, {0x1, 0x3, {0x0, 0x5}}, {0x9, 0x1, {0x0, 0x5}}, {0x0, 0x6, {0x1, 0xffffffff}}, {0xfff, 0x1ff, {0x0, 0xfe}}, {0x0, 0xff0b, {0x0, 0x80}}, {0x6, 0x7f, {0x3, 0x7}}]}}}]}, 0x710}}, 0x44000) 06:00:11 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfc00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:26 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x8000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 06:00:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x32fff, 0x8001) 06:00:26 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000080)='#-\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000140)='\x00', &(0x7f00000001c0)=']-$.-)-/[:\'.&#\x00', &(0x7f0000000200)='\x00', &(0x7f0000000280)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='$))\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='\x00'], &(0x7f0000000580)=[&(0x7f00000004c0)=':\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='](\x00'], 0x800) 06:00:26 executing program 0: syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)) semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r0 = semget$private(0x0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x22f3]) semop(0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000002c0)=""/207) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000180)={r1, r2+60000000}) semtimedop(0x0, &(0x7f00000003c0), 0x0, &(0x7f00000001c0)={0x0, 0x989680}) semtimedop(r0, &(0x7f0000000000), 0x0, &(0x7f0000000040)={0x77359400}) semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x6, 0x81) semop(r3, &(0x7f0000000200)=[{0x3, 0xee, 0x1800}, {}, {0x2, 0x5, 0x1000}], 0x3) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f0000000080)=""/14) semctl$SEM_STAT_ANY(r3, 0x3, 0x14, &(0x7f0000000400)=""/81) semctl$SEM_STAT_ANY(r3, 0x3, 0x14, &(0x7f0000001140)=""/4096) unshare(0x48020200) 06:00:26 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:26 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x9cfff, 0x8001) 06:00:26 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfe80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 2037.686550] loop4: detected capacity change from 0 to 2097152 [ 2037.719635] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) 06:00:26 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfc00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:27 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfec0000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:27 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:27 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x33fff, 0x8001) 06:00:27 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x9dfff, 0x8001) 06:00:27 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000680)={{}, "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"}) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x12202, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7, 0x4000010, r5, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201001283000000000000", 0x6c, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 06:00:27 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xff00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:27 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2037.926558] loop4: detected capacity change from 0 to 2097152 [ 2037.954391] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 2037.956713] EXT4-fs (loop4): group descriptors corrupted! 06:00:42 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x9efff, 0x8001) 06:00:42 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x101c, 0x37, 0x200, 0x70bd2a, 0x25dfdbfb, {0x16}, [@generic="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", @typed={0x8, 0x41, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}]}, 0x101c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd00fe0000000000000a00000053a2bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a70cc6f80d508be13b5"], 0x14}}, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r4, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r6}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r0, 0x4, 0x0, 0x7, 0x0, 0x1, {0x0, r6}}, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:42 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 06:00:42 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r4, &(0x7f0000000140)="b2", 0x20000141, 0x8001) io_uring_enter(r4, 0x58ad, 0x602b, 0x0, 0x0, 0x0) 06:00:42 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:42 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x34fff, 0x8001) [ 2053.589538] loop4: detected capacity change from 0 to 2097152 06:00:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfe80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 2053.614746] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) 06:00:42 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 06:00:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xfec0000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:42 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2053.736580] loop4: detected capacity change from 0 to 2097152 [ 2053.744257] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) 06:00:56 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r3 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80842, 0x85) syz_io_uring_submit(r6, r2, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r7, 0x0, &(0x7f0000000200)="6c8a6af54525dc8344b7e4df428fd5c81bb89f8caa34b3c0b124ee5bcbcd41dcce", 0x21, 0x1a0, 0x1}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0xa, 0x1, {0x0, r0}, 0x585cfcb1, 0xa, 0x0, {0x0, 0x0, r7}}, 0x8) r8 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0xdd, 0x6, 0x80, 0x0, 0x80, 0x82024, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9161, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x8000, 0x10000, 0x401, 0x8, 0xfffffffffffffff8, 0x20, 0x1, 0x0, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x13, r0, 0x0) setxattr$security_evm(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=@ng={0x4, 0xc, "f598f8f01e2c3fb4bbe0d42629352403baee"}, 0x14, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x110, r0, 0x8000000) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x20010, r10, 0x0) 06:00:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x35fff, 0x8001) 06:00:56 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0xff00000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:56 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 06:00:56 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x9ffff, 0x8001) 06:00:56 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x525b, 0xcf77, 0x1, &(0x7f0000000040)={[0xd92]}, 0x8) [ 2067.540688] loop4: detected capacity change from 0 to 2097152 [ 2067.555437] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) 06:00:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:56 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:56 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x0, 0x300}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:56 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0xa0fff, 0x8001) 06:00:56 executing program 2: r0 = syz_io_uring_setup(0xfbc, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x3ffffd}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:56 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x1402, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002600)={0x34, r8, 0x1, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x69}]}]}]}]}, 0x34}}, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x10, r7, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x36fff, 0x8001) 06:00:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201001283", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 06:00:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:00:56 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:00:56 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x0, 0xc00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 2067.712112] loop4: detected capacity change from 0 to 2097152 [ 2067.732336] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 2067.733705] EXT4-fs (loop4): group descriptors corrupted! 06:01:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x37fff, 0x8001) 06:01:11 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0xa1fff, 0x8001) 06:01:11 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) r3 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r3, &(0x7f0000000140)="b2", 0x20000141, 0x8001) syz_io_uring_setup(0x47b0, &(0x7f0000000040)={0x0, 0xcc9, 0x10, 0x1, 0xac, 0x0, r3}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:11 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:01:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 06:01:11 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r4, &(0x7f0000000140)="b2", 0x20000141, 0x8001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000002, 0x4000010, r4, 0x0) r5 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="b2", 0x20000141, 0x8001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x100000e, 0x10, r5, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:11 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:01:11 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:11 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x1}, 0x3) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0xffffffffffffaca3, 0x4000) mkdirat(r3, &(0x7f0000000280)='./file0\x00', 0xb) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000840)={0x0, 0xfffffffffffffe80, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003a0011cd00fe0000000000000a00000053a249b0e2b56e30b7b657bd8267395ca1c354f2819481e563a8c183d540c48dc9daf467e22576ec6a5261a5ef2dcaae16daa7fdade808f0b09a"], 0x14}}, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x4308, 0x0, 0x1004, 0x0, 0x0, 0xffffffff, 0x800, 0x0, 0x0, 0x0, 0xfb92}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r4, 0x80, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x0, 0x0, 0x1, {0x0, r6}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x88a1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r6}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x0, @fd_index=0x40000000, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, {0x0, r6}}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2082.002493] loop4: detected capacity change from 0 to 2097152 [ 2082.023083] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) 06:01:11 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0x2, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:01:11 executing program 6: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x8028}, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:11 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0xa2fff, 0x8001) 06:01:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000001680)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="b2", 0x38fff, 0x8001) 06:01:11 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) 06:01:11 executing program 0: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x4d4b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) syz_io_uring_submit(r7, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x89, 0x2, &(0x7f0000000680)="88c123f1b885ed61b635627462e44e675334d7c82cea4565bd8afc4d4e06bf1a9a42e4817dc443fb7294bf925dad7675bca829f647a105f7dcb880622a95d54ae9409901a7b8c4ebbfda6461ee449dc4c502e828796ce363404b3ba0c798104ab5c99d99c63f8cfdaf2ff033d0810dd9c2bbb716c857c799f485ecc59dbe5a8d519391d85f44bd0154047e5a705afc06f75c9229750bd5162e26ee28d51b7c6ef83c101f1161d99ecf3ab526f7e9721e8d5ce05b6c2457a7f5400144013c596b4e3d4f4b48cdf1a10415df53bdfb11f57057f9851cf0e95da55364768d00e99bde2470b542c0465bb5529f4329c0d7c11b6a7032c0bcc3281dc6901bbb8ba9cb9c98f31d4d24f49ba37ecbf1b8abd479355c2455681191955d99c6eca61451e6fb001b7107929fae2dbd40237d110c57d0a5cd8e5df51d7ed7fe7247532b2c46c503166d428002cbc09b2d8d9f832625e31a3522f1f2d0ea0d380b4783bc42b0e3fd4f0ab5c0abeb6de2c23cf14bfdd6ec53b00e09a84bf754c39135f9e28b8f2911c1fab8bcbe00c901d78f846b9afdad752926cb7459ae44f75a8b786b3b3f1424344fce0b45adcdbddf0001ce5f134df132d20c2dc33057e85fba2fcaa48071dd09b13b77094fb8c7c228371bd6b85c9ff6a701aa9e9cc0ef9b76261146f27a411dc4cfd363f7a036961c0aa97b9ea8f8731bd31297e0121349ab01f1378c8aec38daad07fc2f80047636cbc4c69ea458aa9bc5f5c9eae8e2c447f54bd673cd01e5bd88158ab5ea4b4be8b2e3fa620de48e90feb41792d9897b8787653b3428fc38559e440c8ab2f802e9f68ae24a4ff3a47c5e6b39a1cb763fc59fce18aee6060ceda8de53871f70ad6e2bd22396e4bbc57cf4fb256975692f1142b0659719d0d52ed34da3bd8c1356efe3705847385307099cbdb39bb84a63022459b5843d4777d1de905f1888a85949cf15300041fc4daebbb26f85f9095ea699121815dcea8af812992b725f481c303b3da4663b29f4d1080210fdd5a48c60e792a9284bed7856ebbfabf3a03e490cd122173d4e0d6a92d0a4e9911e8e5f6b37871874dab817847dacb0661bc73940957310c5e86b48a4fe04aff17081497872253015dcf3a4f268b796cdffc7358243064046cac78602ae71722f084fc1d8e99b7fd9877e9ad050440fcce579cda4485e26579f982ef812626d2a504214bd75a0557ee24210f1a05207dc209668f87174484d0b0a5c75ff3973b120e65c53827db81e96ff2ccd0e93aa5326b68dac224f08363ce65f3323f1cb7abcfe5aaa1b10b61e4b4fc04a899e887337e6d702854b7f999f736968c3af7a6d5193f0dd0512c613fe9107026e679edc67bc4550f297e805688df994a15d917f36f17d1612c7cdcd78fd24ac8ec703dafead3310cc828f579d751443ca456defebfbc9c2780d622c62825c399e1552b74ffd8f603a979a66650d8b24b240dc084f7a82690b39f381a2f11d841c085467b833aa809349dd8db4d29aa69c075456bc9b3e5c948af9bb87e88c56d5116913659f6bcc81643927d1fa9a6de2e72522df2e25ce9680eab144d773dc000e92ed2fc678df823b3ffad78dddd6e66a3defbee4de5d4347e7154ff1c8e48b89ef5efc6ccf0e377ddfc60324902b81262684dda13d14125e833133743bfe772f7b7d72bee85134fd5a0511efcb1eb5c23f53ea76ab77d09dfa659fab61114617369addfe021caf28a8aacec40dfbfe94d0144697cd8701582e01d63ebbcde1441b1d938ce061866b0e05208006c06a4163bc2461af586a8106cd9e1447f2d42a5df698454599d7a80ea429af3117eb0d9a4bc1aea4297252ac7650ef069dbdddb23c506caabea6afa02fab97c326872d052a0b449392133c71297b2c28866547faf59506a7107fabc847c8f27a5cfbbfa388a2c50aa3539ad814e0e87e171a934e41e9196fba42a745d31d8c7c71e0afff036f783feb04b3501bed7b80468d7d373cb7f4672264848eb2ddd5f37656feb8f8adbe44b8a9b65666449df5e16f91f20bfdaa46867338b523ca616d4d60e55accc0867c5df28a7c3d4822e16c71bc9f5fea526f1deb18eb0570fc21614bbac957803952849a67473faafb911c8fa8e8f6cad344f0d7098e6be83571debfacbfd71bee37fb713c895a54e1ca905ef3b59aa2fb6435a3e91aa641087c0ba24e97af8a89224aab9dbc0c3530b2a07e8aea010806fe97c05a5815034a84a7fb4e5de82dce82bd85737d192dcf4451ed8a0704d83f555f14a3930f9f8f70f3cbd337e6f05fc9201de1d72aca252c18714e77f2863125443aed003d216c0d3157f69c9ebb6b827af33529e8c53a1198793517b7361af9d234e24005ee87221c4de2d4f4d8f651fbac5e3f169a692cc987bf111e97198bc61ce2dd2761df0ad7c995b3d2392279dd065eeaf9fb3d3e6d5bf2d289933966ff99318453ca26f8c8d6aeac5d44c9b0b264d32e3af738e0acea3b19c6c34f4789017a2d4a633a261342b52cc59808e8564f5b3bc1e02333e90e3b2a3296043f6bf9cc429a4a20ff80529e479f114e7335d39e4fba52a21ac322d8e874ae8ca5d17354488bd0432bb0344f9e3199d58effefee5c2e53bf1865ec166cf0750d2f082894799d99348fae9350462b668797bfe11b713224e681451e29c9d02b35f8a0c82b8501dafb3d18260b9938a12a5a9897e664512d2809cb0e0a32ed0a662a29299365d47f896098c57f6023fcc9ac0c0fa50bbb32170e876448d769fb8007d0a775a5080915c527892b48b3e4a2bcdf60f5f6be10dff6246b17d69deba9dcbb844b32088678af1e1d5bf54201d2256bb2ea4d72cf4a6c86450eeb6452aceb1536f3860b10eaae37aaa333c7840707f03f58e072e8581b96a535c02a70df8e5c8f057e06234e7194ce6907ebb9126132f675098abc2c8c713df1fe31f2806b5e4ebea3c0b67303667eeb3069ae01114039bb93f2866260ba591d456905ddc665097e5a4564c59ed812acee87deac09a145b2eece7f64c4eea248ebe827cabd3ba9fcc1b23ba1f12393b5d853594d80a43e8438bb318c9bbca2100da13f9fc21af2f0fb689cb1d0051a6bf35fbb8d24af9da7ad93a3c3db4e22cd8438625229c1b0a3b5aa4aa30bd95a9c2ec8c8c4a024b27e9f702e352d3675001ecee509e7f6cc6033182a1d114e1b07b692096e23d0f1ad33f8429710295434132c5cfba4594df2ef3cfaf167ba681a03c35aa3a89873760921743cb336f6bcc2cbe010ce24d31d7f4252f230e42b5907fa4ce9bc95bb79fe794361bccd87a1f29b251f12fb637bc9d4b1b5f4621fe94f43fba232d0327cf99af89720eea197b1f3b8f58b13ba6706f72cad76a26f86e3de71ed3315c0453f3a6997aead133cde848c1d18026d874c38ee7fe4178ce9e8fc379aff91d9f9b61355556414fc7c2a87e0ff1ff3f8871008fe5d3dd00b4142a677cd9fb1094f1f4f27b417bd1b865b696deb954d43174546c732726f9f69f8eac0fa110adc21d5d991cce82902246c5afdc165695038807a6c6b4d53420f39bff83fa17fdd31b2614034e81f594ef4c1f933984d645681b382a330d6a9b4570ff50908b4ff59ae22530879cc033f83fe4461744f0d197f12363a643d623f6fa66d9def2e1acadc8f2249179cfc02f6f3a329a441e1ed8185f1f380d9287ce4f46d4a8bc4e5b1ed991e1e3b3a700b4da2efe7b869c3b8880985a7cecb92d55f36fbc0e6cb6b9bdaee5048431bd830b053bd004ac21a3f4b6389da2c7d161b289897ed500e78771209657af022098b1bda7ca2f94d507db96d8759bce3002ce6d888f13f58ae8b79966a5e1797ee51aa47833e33a82f63948315c58c29690a0e3915768cdaff31e5c4ab8b2114b88a5120b57d36bb069ed4117a82f07cdfdb77c6a87e65a4ee88f3b1070828f06450b1785ebb5a946fd89a4e121139028b4caeb04e1de236f411e925775df153a32dedba611ecab857b404f8c55ee1d46832074cc3e48627cead8aad476371da3d800d55b05593bc8f4de306ad339732a3b3940061c6fa95ef15e6c41d021cd50e3ca840ef12a3d8b6d5ede78b86d8a45473cfa846977f2be0cdd9fd4639dec58755a03f47c9e5bae8eadd2ce0802c6f74df2afd3d7a96053b19b98fc445a8b31f08b64eb7a9e9b38a414bc3be59dd100b59ce167dae732bca4918b205a7485d7bb2209ece1304f9c0b483a643e101871ed12f1b35b753f4ed6f9efe1bc472a066488e9a572e79fa624c6ad34390a3adfea08688bbb50e10b4bdb22967df96edf9096258c5c7715e2cfe91f20e44d93331a6f72946fd6c63e48e28c1022ace5589e6b51b9be46b254d3958b158e9cd90bc9c18adb47329a7d92c8e95c5ae88e4f8d58c050e294dd65f4e27f61995b7b3e9773f059452d470ee41ae233a9652f18098748d33fa145eec70c868674ed9c589664b9e49f7c6a33265f741f00452dce4d872130abae78d445fdf0f37aa764004f7fb0edc36f8ff84c47aff75f71d29716bd2cd27e2bb77f3bd9fab82451fd12f03fd2498436ece6577da6ae1fa944e1b59fbbefd351836e452539e5ad472da33dae81b5fb5de6f959aa2d3ee87fcd9b8cf25ec1c7f796e3439d227d8474288bc8fe02688a73df1727555cf4e33b2ac39197b032bb4035e8d6e2a398323c29619dfe2eb49052020eaa594fc5126dcc784dbee7b6779a69cc779113d878f53375f9720cb9228bf6a5732fe033d79fe851b0ebcce2beb2e2f45ae3e0817b52a67bf709b348374ce3b5f53ff2eff41851c049bef9ec0eee74349888fc1347499dd3d2f49c3ab16300870d6963fc659a17df37720adbd14af1d57365dbd9fd2d9bb0eeb2536f890e2b53bce0c2773a885b4c1124cac6370f3874d67cb28320d2ac1dc056b34942178aa8cd982bdae9f1a2d0dd844ec363c1b24a3525f66f1ba9fe9c2ea0141567d60f804bd4f99d7389af92fd31a30e5446fc75a72c683541bf671b9e2cc6266b284b588edc8976c81fa619172dd98d0715bc733be3814292c44be05082ff9b19ee0cea8a62030e1cb813d483a7eb1fe4efee0d56d4cd8dd53aefa98b4f62332bb6e940b65772c02fa30ba80ee3178f90b2321b6c2064194e027fc25a29778843afbe3ecf8d8a5e8aea3247022c861fcf5d2fa3af0460e73d875b6c3fbc4359c2d52ccd2724992eb03ca22c4f34ae5a7163c7d42c887ee2993ea5e1a0c24d521e6bb894ae6cb236b27b6d1919af133604667410363c525bd2b5c6f2b0117e1ff37e0e1c8fb8b06be85feab5951939f2fa880641b5441e90b8765a49459778ee4fddf4e899a93506a439683c234fe0bfc3d0aa557e3cd87444e799ff12be1f767dd43f48cd5723c7b714567dc8caff4442229787328984bdc8c522a658e9675db3e3fc03f0e281a0fbe7a5f1701c72d2ecad5c421fb457a0453a5b4183155dd66ddbd937a78403a5fd92d66c9bda113a2ac2aa2cdde8d50734483ec496015b92036fc96960c925575478d6015a1a5c32c8799895117325bc8aa44bc04530d11661c16bca0ceec983450a0fa92b1772baf42c91945e4b0d0223f3a2ab9e5bedc0d668194b040ccc4672818056cd7da50c05016013888efe3d9968e76412cce75a72e82c6950292c4674248600a1a9fd8d0e67b2a6958bdc07a58633bdaa3143fb55fb1f03bb1940843ad05581bb50735a2941b3784e757332244ffa46fe76bf69cdef24674640b412fc9023bb13dd844675a64915c57fda549a532216d47c04415bdccb651f5e547", 0x3c, 0x0, 0x1, {0x3}}, 0x5) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 06:01:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000", 0x60, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934b5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="0200000001", 0x5, 0x1000}], 0x0, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}) 06:01:11 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@local, @private1, @loopback, 0xb, 0x0, 0x0, 0x0, 0x0, 0x862400c2}) [ 2082.211599] loop4: detected capacity change from 0 to 2097152 [ 2082.239513] EXT4-fs (loop4): fragment/cluster size (65536) != block size (4096) [ 2098.325342] kmemleak: 3 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88800b28c780 (size 232): comm "syz-executor.6", pid 13254, jiffies 4296749100 (age 24.129s) hex dump (first 32 bytes): 80 31 e8 45 80 88 ff ff 00 00 00 00 00 00 00 00 .1.E............ 38 20 00 40 ff ff ff ff 00 00 00 00 00 00 00 00 8 .@............ backtrace: [<00000000fb64866d>] io_submit_sqes+0x6fe4/0x8610 [<000000004f570860>] __do_sys_io_uring_enter+0x6b2/0x1890 [<00000000e717c487>] do_syscall_64+0x33/0x40 [<00000000025c9882>] entry_SYSCALL_64_after_hwframe+0x67/0xd1 BUG: memory leak unreferenced object 0xffff88800b28c640 (size 232): comm "syz-executor.6", pid 13254, jiffies 4296749100 (age 24.129s) hex dump (first 32 bytes): 80 31 e8 45 80 88 ff ff 00 00 00 00 00 00 00 00 .1.E............ 38 20 00 40 ff ff ff ff 00 00 00 00 00 00 00 00 8 .@............ backtrace: [<00000000fb64866d>] io_submit_sqes+0x6fe4/0x8610 [<000000004f570860>] __do_sys_io_uring_enter+0x6b2/0x1890 [<00000000e717c487>] do_syscall_64+0x33/0x40 [<00000000025c9882>] entry_SYSCALL_64_after_hwframe+0x67/0xd1 BUG: memory leak unreferenced object 0xffff88800b28c500 (size 232): comm "syz-executor.6", pid 13254, jiffies 4296749100 (age 24.129s) hex dump (first 32 bytes): 80 31 e8 45 80 88 ff ff 00 00 00 00 00 00 00 00 .1.E............ 38 20 00 40 ff ff ff ff 00 00 00 00 00 00 00 00 8 .@............ backtrace: [<00000000fb64866d>] io_submit_sqes+0x6fe4/0x8610 [<000000004f570860>] __do_sys_io_uring_enter+0x6b2/0x1890 [<00000000e717c487>] do_syscall_64+0x33/0x40 [<00000000025c9882>] entry_SYSCALL_64_after_hwframe+0x67/0xd1 BUG: leak checking failed VM DIAGNOSIS: 06:01:35 Registers: info registers vcpu 0 RAX=ffffffff83e9caa0 RBX=0000000000000000 RCX=ffffffff83e8470c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e9d268 RBP=ffffffff84e323c0 RSP=ffffffff84e07e48 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=fffffbfff09c6478 R14=ffffffff8567b888 R15=0000000000000000 RIP=ffffffff83e9caae RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0e5ef4d828 CR3=0000000008cde000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000413a148800000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e9caa0 RBX=0000000000000001 RCX=ffffffff83e8470c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e9d268 RBP=ffff888008978000 RSP=ffff888008987e80 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffed100112f000 R14=ffffffff8567b888 R15=0000000000000000 RIP=ffffffff83e9caae RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd6a3ebfd8 CR3=0000000018150000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2932333220657a697328203038376338 XMM03=3120646970202c22362e726f74756365 XMM04=2e2e2e452e312e202030302030302030 XMM05=20666620666620383820303820353420 XMM06=65747962203233207473726966282070 XMM07=34322065676128203030313934373639 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000