&(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) rt_sigqueueinfo(r0, 0x1c, &(0x7f0000000240)={0x2a, 0x6, 0x8}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:53:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e", 0x62, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:53:58 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000500)={0x10}, r0, 0x3, 0x0, 0x1}, 0x8) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:53:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e", 0x62, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:53:58 executing program 0: ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000180)) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000340)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) pipe2$9p(0x0, 0x80800) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x2ff}]}) dup(r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/schedstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8}, 0x0, 0x3, r2, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000300)=0x9, 0x8) write$P9_RREADLINK(r0, &(0x7f0000000200)=ANY=[], 0x116) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f00000001c0), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffe81) write$cgroup_int(r3, &(0x7f0000000200), 0x400086) dup2(0xffffffffffffffff, 0xffffffffffffffff) 02:53:58 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r6, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)={0x190, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xebf, 0x2a}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x140, 0x3, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xa2, 0x2, "cf9ae2c223de91e659ee3bc3847213eb0a0793fd3425f5a89f13527223c5ab43674e8e067a41f4ddd050329022ac35b4d532cbf5f49c7b7d520f179eea41df0e0835ec4754fb8c892f218fe4cca3a3b22888409120cfd35f2b9728fbc7e88c31cebd20af73ba0a44a9dc3b76c27893f547b4642786addcbb9e9a9cf3f91995f0176fa86105bfd9a6ff71e05cab7116a276d12bc05b9bd68451ba411ff20e"}}, {0x5c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x57, 0x1, "19715848b3270525b6969d16d104083b1525e74ab13d92678aebb9994c49875a33eb7c3043a8ab2331e8eea035469d90caeff7e48b6c19acbbe9f2bfbe23e317b27bf9c81c8bf452f2810cc36c0e89d049d16b"}}, {0x38, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x32, 0x1, "96bf90c0ebee94bc5e6c2229ac9e0caf66ed35a01eda1e48dab87fbabcde870ad5897798cd322d2a8a28030113f1"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0x4004000}, 0x44050) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @private1}, @IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@RTM_DELMDB={0x58, 0x55, 0x200, 0x70bd29, 0x25dfdbfd, {0x7, r0}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x4, {@in6_addr=@private2={0xfc, 0x2, [], 0x1}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@in6_addr=@private2, 0x8edd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20000808) rt_sigreturn() rt_sigreturn() rt_sigreturn() r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) rt_sigreturn() syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x7c, &(0x7f0000000080)=@string={0x7c, 0x3, "acbe1bf80d183237620e5f70206e895dd1d2cf9e1f714a7df71925463cebb3f0fb62ca0a0266c32a17f6c7c6a1c721d337ee81e0ab86bf69b431a9feb75a09158e168f449f78e441be01845056c7361c11ded882850bd1f8507399db299445dde94a2d72b2082ff205e5c901804639456b6c3eee259df20ce076"}}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1c01}}, {0x79, &(0x7f0000000580)=@string={0x79, 0x3, "f964b9296377970a9ef38cfedfdd04350513636fb241b635dcb65bf016fe2db3b54f9e1c6463091a0e14afdaaecc0bdc62ddab783f86b9ddea43f93659ebb7f314a4cac863b734300f404fc3421717f22a8c977b4a04be82c7b6feaa98c35760fb57add087ed4b1f7cc9d2390d3c88d4bda35b2b5ccf07"}}]}) 02:53:58 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x4, 0x0, 0x20, 0x40, 0x0, 0xe1, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x200a, 0x7, 0x0, 0x0, 0x0, 0x6, 0x800}, 0xffffffffffffffff, 0x0, r0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) lseek(r1, 0x1200, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) [ 172.842279][ T1840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1840 comm=syz-executor.4 [ 172.851246][ T1835] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:53:58 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000500)={0x10}, r0, 0x3, 0x0, 0x1}, 0x8) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:53:58 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) rt_sigqueueinfo(r0, 0x1c, &(0x7f0000000240)={0x2a, 0x6, 0x8}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) [ 172.883722][ T1844] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. 02:53:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e", 0x62, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:53:58 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) rt_sigqueueinfo(r0, 0x1c, &(0x7f0000000240)={0x2a, 0x6, 0x8}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:53:58 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000500)={0x10}, r0, 0x3, 0x0, 0x1}, 0x8) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:53:58 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e", 0x62, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:53:58 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00', 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000000000000000026bd7000ffdbdf25000001006a13ed7ebb430a9d000000000000000000000001"], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x2404008d) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001300)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000000)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES32, @ANYRESHEX=r4, @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x0) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000240)={'filter\x00'}, &(0x7f0000000340)=0x44) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x13080040}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="01b8", @ANYBLOB="1ccbba61d715393a5c310c66db2aaa3a5cb1e2ad418e0a7c7180ca01eb87769ee411d4409c390027e2294ac1e83cb213abbcdc74", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x91}, 0x20004084) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000552da", @ANYRES16=0x0, @ANYBLOB="330a2dbd7000040004000000000000003c00038008000100ffffffff08000200070000000800010000040000080003003d00000008000200e50000000800020029040000080002000002000004000380240005800c000280080003000314000280080002009d01000008000200060000000000000000000000000000000000e41334976853e32c6accff7c373624582ff13e623e9f4b91e90e6fb157943e515d07af5254370e9241557453000000"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000001400)={{0x0, 0x7f, 0x3, 0x7, 0x8, 0x3, 0x2, 0x200, 0x101, 0x5, 0x8, 0x3, 0x7, 0x6, 0x2c}}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x10044}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x74}}, 0x0) 02:53:58 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) rt_sigqueueinfo(r0, 0x1c, &(0x7f0000000240)={0x2a, 0x6, 0x8}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) [ 173.018093][ T1865] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. 02:53:58 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) rt_sigqueueinfo(r0, 0x1c, &(0x7f0000000240)={0x2a, 0x6, 0x8}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:53:58 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000500)={0x10}, r0, 0x3, 0x0, 0x1}, 0x8) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:53:58 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe05933b", 0x69, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 173.147471][ T1873] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 173.152116][ T1882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1882 comm=syz-executor.0 [ 173.181673][ T1877] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 173.201139][ T1877] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 173.240296][ T1882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1882 comm=syz-executor.0 02:53:59 executing program 4: gettid() r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) wait4(r0, &(0x7f0000000000), 0x0, &(0x7f00000001c0)) timer_create(0x2, &(0x7f0000000180)={0x0, 0x17}, &(0x7f0000000080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f00000000c0)) 02:53:59 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) rt_sigqueueinfo(r0, 0x1c, &(0x7f0000000240)={0x2a, 0x6, 0x8}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:53:59 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000500)={0x10}, r0, 0x3, 0x0, 0x1}, 0x8) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:53:59 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e", 0x62, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:53:59 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='upperdir=file1,lowerdir=./bus,workdir=./file0,metacopy=on']) chdir(&(0x7f0000000340)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x0, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) 02:53:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e", 0x62, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:53:59 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) rt_sigqueueinfo(r0, 0x1c, &(0x7f0000000240)={0x2a, 0x6, 0x8}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:53:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x180000) sendto$inet(r1, &(0x7f0000000280)="ec222d37ef35e1fe8eac6c64eef10f90f9b726d4817e6f270cffc11a329a9deba8fa845ef7881b802b138f4ae602426460ff4c1ed0f3852238af066a69cbb4f8241a69bf3a15c50479362ecf302b2f8f1eac589f6064d4f2b80cfe3896793aab623237b355726a6789ed169a3500404d55b6dab60ad3308ed1", 0x79, 0x40010, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000000140)="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", 0x124, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) rmdir(&(0x7f0000000380)='./file0\x00') ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000340)=0x5, 0x4) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000500)=""/4096) 02:53:59 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000500)={0x10}, r0, 0x3, 0x0, 0x1}, 0x8) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:53:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e", 0x62, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:53:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1}, 0x0) waitid(0x0, 0x0, 0x0, 0x80000000, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x800008000000}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x3) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0xfffffffffffffcec) getxattr(0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x8) getpid() r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x43) sendto$inet6(r3, 0x0, 0x0, 0x24000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0) ftruncate(r4, 0x10099b8) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141442, 0x1ec) ftruncate(r5, 0x87ffc) [ 173.759415][ T1901] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. [ 173.779667][ T1902] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 173.789289][ T1904] overlayfs: filesystem on 'file1' not supported as upperdir 02:53:59 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) rt_sigqueueinfo(r0, 0x1c, &(0x7f0000000240)={0x2a, 0x6, 0x8}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:53:59 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000500)={0x10}, r0, 0x3, 0x0, 0x1}, 0x8) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:53:59 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYRESOCT, @ANYBLOB=',seclabel,fowner<', @ANYBLOB="43330cb68a6c6b896ff0463552c5fafab985653e66a87aed", @ANYBLOB="2c666f776e65727437812ea867330dacfa9782b134050ac1706275abd047ea6d94ee1c66d7920b99ec16d260725a", @ANYRESDEC=0x0, @ANYBLOB="356de2d68728f497b375c7ae745f3a44e687d712b43889c30b25fd3f4307399a9b11570bf4074f24c79a213a59cb339221a99b658bf6e7d675dc825285291d713a7eb9d9d1d1f744592b182dac9fa4a487e07ecc017d220928024a2b69fc87ff6e891be251ef302ae530a7851036c04132aeaa8f0f26148db10200c6327d517b6e8d9b9856818c17b592a73b1e3158d88268b2", @ANYRESDEC=0xee01, @ANYRES16=0x0]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x4}, 0x80, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x7, 0x6, 0x74, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0x3, 0x101}, 0x20, 0xffff, 0x6, 0x4, 0x1, 0x3f, 0x9}, r2, 0xffffffffffffffff, r1, 0x6) unshare(0x20600) renameat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') io_submit(0x0, 0x6, &(0x7f0000000e80)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f00000006c0)="1f2c96fca284a961844fb126e2e96cef335ea37348d7759aa283348ed48a2fd350e3a2298f8bba7f3f97a47a8f10e53bed8e0b59cd66013a699e2a9d2b8e7266bc4993255b46ae1508acaf24c1e64a0819162c156770321c25a0686ea05c82d3e904579a0267bd90c2d0b01c056ceb6bf84d3846e0b85f5adf52d5e8ba8c747a4d905e8a", 0x84, 0x36, 0x0, 0x1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000000b00)="2fb017c50981fe6ca3b5bf62dbcbeb427cf68258026b117ac38245700cca61e20bbb29b3040739f833141b673ada9ea59b7a9f1e83f00d011c9cb0e4d2d7677e2fff2089a54a9322252558b16449c426d2c2d633e502b80f59de5f619fb8601438", 0x61, 0x39}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f00000007c0)="55ead3eb7eda390d2808cceeb81e2b8640", 0x11, 0x80, 0x0, 0x3}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000009c0)="ac91606356bae13218016b326a627ec533f74f831613ce28fb86a351fac95dd8e3577f31966ad3322e27e578334b739d019038145e", 0x35, 0x8003}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000180)="8ed3c6eecdc8356d7fb74bad93df7054c0439955388212e2e1d2f2d7006290f068a3399b2f438312b16a5f6d7ce982fc567d072dfca5c9c6dc5868d41c20090af1", 0x41, 0xff, 0x0, 0x1}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x1, 0xfffd, 0xffffffffffffffff, &(0x7f0000000e00)="47bf71fa75", 0x5, 0xffffffffffffffdf, 0x0, 0x1}]) io_setup(0x20, &(0x7f0000000080)=0x0) r4 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd930x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000500)={0x10}, r0, 0x3, 0x0, 0x1}, 0x8) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:53:59 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) rt_sigqueueinfo(r0, 0x1c, &(0x7f0000000240)={0x2a, 0x6, 0x8}) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:53:59 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000500)={0x10}, r0, 0x3, 0x0, 0x1}, 0x8) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) [ 173.931636][ T1938] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. 02:53:59 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e", 0x62, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:53:59 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:53:59 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000500)={0x10}, r0, 0x3, 0x0, 0x1}, 0x8) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) [ 174.208599][ T1959] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 174.225637][ T1959] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x1}, 0x0) waitid(0x0, 0x0, 0x0, 0x80000000, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x800008000000}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x3) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0xfffffffffffffcec) getxattr(0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000d00)=ANY=[@ANYBLOB="0da8fb707900000000e59dfad0651a7eeef27aab90505953bed6ff7d09a4a2b1e90c1ce203f0b91baae1c6fe1a05fd8b9b349127e848b0233bb8c1ca4950030000007b050c2e6867c5b329b32d05bc2dcd491903c7dcdb73589871b96cd292c8911dff269b2a87892d8fce5c1b5fc126472a7bd8a2624f1eea186096871f32feaaae71471e8ea3e7fe68ff1ea69c8402d03b1a38e018b90955bcba5480d656438e604a9677243686206c2333a5cef9243fbf4de936c3a770bb28e760d6ae35d265469588e50150cc696406a994174d707af2c67b2c33ffeafcf639da6afa1c841a617f8e2bf956d2bf6898d9e1d3358f719a91e8c18063fd4813fd4b47c342b4a105d8b2eca52bf4ffc13765dcea6329c1c9bfb150549c088bbca50100a34129411bed2080538c0994c28be999281af31c8bab3f443a668630040005ac2db3f9627f1e002dbb8519e78f134e906ae1f2f1d720d8fe7b694fad50116a7237d56664de351dd7098a10d6b6786ff098c358dbbb150cab484a8c45bc1391986e56bc7fefc3a354677812296d9bafdf8c6d4ecb5dcd189ad8cdb5034ae651879a22d7bc6e6e7e804518146d5ec6157503425c273f2e6c8a46cd86ee41758348d1ed9231293d8ba0aa1c8f335fcaaf4d29bc9eb7eb2e5adc40c1057777c9a16ab3274ee2f65aa5a1455d25dd5a05267661d5"], 0x8) getpid() r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(0xffffffffffffffff) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x43) sendto$inet6(r3, 0x0, 0x0, 0x24000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x0) ftruncate(r4, 0x10099b8) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = open(&(0x7f0000000140)='./bus\x00', 0x141442, 0x1ec) ftruncate(r5, 0x87ffc) 02:54:00 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYRESOCT, @ANYBLOB=',seclabel,fowner<', @ANYBLOB="43330cb68a6c6b896ff0463552c5fafab985653e66a87aed", @ANYBLOB="2c666f776e65727437812ea867330dacfa9782b134050ac1706275abd047ea6d94ee1c66d7920b99ec16d260725a", @ANYRESDEC=0x0, @ANYBLOB="356de2d68728f497b375c7ae745f3a44e687d712b43889c30b25fd3f4307399a9b11570bf4074f24c79a213a59cb339221a99b658bf6e7d675dc825285291d713a7eb9d9d1d1f744592b182dac9fa4a487e07ecc017d220928024a2b69fc87ff6e891be251ef302ae530a7851036c04132aeaa8f0f26148db10200c6327d517b6e8d9b9856818c17b592a73b1e3158d88268b2", @ANYRESDEC=0xee01, @ANYRES16=0x0]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x4}, 0x80, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x7, 0x6, 0x74, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0x3, 0x101}, 0x20, 0xffff, 0x6, 0x4, 0x1, 0x3f, 0x9}, r2, 0xffffffffffffffff, r1, 0x6) unshare(0x20600) renameat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') io_submit(0x0, 0x6, &(0x7f0000000e80)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f00000006c0)="1f2c96fca284a961844fb126e2e96cef335ea37348d7759aa283348ed48a2fd350e3a2298f8bba7f3f97a47a8f10e53bed8e0b59cd66013a699e2a9d2b8e7266bc4993255b46ae1508acaf24c1e64a0819162c156770321c25a0686ea05c82d3e904579a0267bd90c2d0b01c056ceb6bf84d3846e0b85f5adf52d5e8ba8c747a4d905e8a", 0x84, 0x36, 0x0, 0x1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000000b00)="2fb017c50981fe6ca3b5bf62dbcbeb427cf68258026b117ac38245700cca61e20bbb29b3040739f833141b673ada9ea59b7a9f1e83f00d011c9cb0e4d2d7677e2fff2089a54a9322252558b16449c426d2c2d633e502b80f59de5f619fb8601438", 0x61, 0x39}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f00000007c0)="55ead3eb7eda390d2808cceeb81e2b8640", 0x11, 0x80, 0x0, 0x3}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000009c0)="ac91606356bae13218016b326a627ec533f74f831613ce28fb86a351fac95dd8e3577f31966ad3322e27e578334b739d019038145e", 0x35, 0x8003}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000180)="8ed3c6eecdc8356d7fb74bad93df7054c0439955388212e2e1d2f2d7006290f068a3399b2f438312b16a5f6d7ce982fc567d072dfca5c9c6dc5868d41c20090af1", 0x41, 0xff, 0x0, 0x1}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x1, 0xfffd, 0xffffffffffffffff, &(0x7f0000000e00)="47bf71fa75", 0x5, 0xffffffffffffffdf, 0x0, 0x1}]) io_setup(0x20, &(0x7f0000000080)=0x0) r4 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd930x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) rt_sigqueueinfo(r0, 0x1c, &(0x7f0000000240)={0x2a, 0x6, 0x8}) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:54:00 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e", 0x62, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:00 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x8) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72", 0x63, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:00 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) rt_sigqueueinfo(r0, 0x1c, &(0x7f0000000240)={0x2a, 0x6, 0x8}) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:54:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72", 0x63, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:00 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:00 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) rt_sigqueueinfo(r0, 0x1c, &(0x7f0000000240)={0x2a, 0x6, 0x8}) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) [ 174.744153][ T1976] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:00 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e", 0x62, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:00 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) [ 175.023035][ T2000] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:01 executing program 0: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:54:01 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYRESOCT, @ANYBLOB=',seclabel,fowner<', @ANYBLOB="43330cb68a6c6b896ff0463552c5fafab985653e66a87aed", @ANYBLOB="2c666f776e65727437812ea867330dacfa9782b134050ac1706275abd047ea6d94ee1c66d7920b99ec16d260725a", @ANYRESDEC=0x0, @ANYBLOB="356de2d68728f497b375c7ae745f3a44e687d712b43889c30b25fd3f4307399a9b11570bf4074f24c79a213a59cb339221a99b658bf6e7d675dc825285291d713a7eb9d9d1d1f744592b182dac9fa4a487e07ecc017d220928024a2b69fc87ff6e891be251ef302ae530a7851036c04132aeaa8f0f26148db10200c6327d517b6e8d9b9856818c17b592a73b1e3158d88268b2", @ANYRESDEC=0xee01, @ANYRES16=0x0]) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x4}, 0x80, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x7, 0x6, 0x74, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0x3, 0x101}, 0x20, 0xffff, 0x6, 0x4, 0x1, 0x3f, 0x9}, r2, 0xffffffffffffffff, r1, 0x6) unshare(0x20600) renameat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') io_submit(0x0, 0x6, &(0x7f0000000e80)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f00000006c0)="1f2c96fca284a961844fb126e2e96cef335ea37348d7759aa283348ed48a2fd350e3a2298f8bba7f3f97a47a8f10e53bed8e0b59cd66013a699e2a9d2b8e7266bc4993255b46ae1508acaf24c1e64a0819162c156770321c25a0686ea05c82d3e904579a0267bd90c2d0b01c056ceb6bf84d3846e0b85f5adf52d5e8ba8c747a4d905e8a", 0x84, 0x36, 0x0, 0x1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000000b00)="2fb017c50981fe6ca3b5bf62dbcbeb427cf68258026b117ac38245700cca61e20bbb29b3040739f833141b673ada9ea59b7a9f1e83f00d011c9cb0e4d2d7677e2fff2089a54a9322252558b16449c426d2c2d633e502b80f59de5f619fb8601438", 0x61, 0x39}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f00000007c0)="55ead3eb7eda390d2808cceeb81e2b8640", 0x11, 0x80, 0x0, 0x3}, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f00000009c0)="ac91606356bae13218016b326a627ec533f74f831613ce28fb86a351fac95dd8e3577f31966ad3322e27e578334b739d019038145e", 0x35, 0x8003}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000180)="8ed3c6eecdc8356d7fb74bad93df7054c0439955388212e2e1d2f2d7006290f068a3399b2f438312b16a5f6d7ce982fc567d072dfca5c9c6dc5868d41c20090af1", 0x41, 0xff, 0x0, 0x1}, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x1, 0xfffd, 0xffffffffffffffff, &(0x7f0000000e00)="47bf71fa75", 0x5, 0xffffffffffffffdf, 0x0, 0x1}]) io_setup(0x20, &(0x7f0000000080)=0x0) r4 = memfd_create(&(0x7f0000000900)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd930x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:01 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:54:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e", 0x62, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72", 0x63, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:01 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:54:01 executing program 0: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:54:01 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:54:01 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e", 0x62, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:01 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:54:01 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) [ 175.722167][ T2016] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:01 executing program 0: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:54:01 executing program 4: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000500)={0x10}, r0, 0x3, 0x0, 0x1}, 0x8) io_submit(0x0, 0x2, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:01 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852", 0x65, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:01 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:54:01 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x423, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x401000000001, 0x0) close(r3) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffa) getdents64(r0, &(0x7f0000000000)=""/97, 0x61) fallocate(r2, 0x1, 0x8000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf41be7ff89490ca3, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 02:54:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:01 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:54:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:01 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) [ 175.814742][ T2052] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852", 0x65, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:01 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:54:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 175.913060][ T2073] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:01 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000001140)) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:01 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x8000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44840) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r5 = gettid() rt_sigqueueinfo(r5, 0x3c, &(0x7f00000003c0)) 02:54:01 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') rename(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ftruncate(r0, 0x800) write$input_event(0xffffffffffffffff, &(0x7f0000000280)={{}, 0x0, 0x8, 0x7}, 0x18) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000840)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "38ed863506143eeabd14ee8d9fa7efe5a993c8c6d4a5d54017c74dd03698007092e65756916da615ab28cafa2f71381330351ad5266432a05662aabdbccaa46df89e29c02e44f2522982a7f28fac76cdc779d29abf75397c6998ea6ac3db200c9cf404b5b3664532864abdced914eabb24aa663b23aa65cce3750bbbaa33d36abbd6ffba402b25a083d2379e29ef53237aec06ea815ba481a35bd8ba2fd8d46dec9c99ae034d1059dea85e3265eea538969399544a5b108923bdfa88563194ad49264354441dd5f9c023ac30d87d144cd8e24c1237f0dff8517947ea78bc33f39eaceeb9b561cb97b16e3e2fa741bf44d1bab621d23ab74101d3adf5261836bb", "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"}) lseek(r0, 0x1200, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x80000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x8400fffffffa) 02:54:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852", 0x65, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 175.952667][ T2063] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 175.974961][ T2063] File: /root/syzkaller-testdir903516288/syzkaller.75JZd2/52/bus PID: 2063 Comm: syz-executor.0 [ 175.998667][ T2080] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 02:54:01 executing program 0: fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffffd) mknod(0x0, 0x0, 0x0) lstat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, r0, r1) r2 = open(0x0, 0x525002, 0x5d) dup(0xffffffffffffffff) r3 = openat$null(0xffffffffffffff9c, 0x0, 0x380, 0x0) sendfile(r3, r2, &(0x7f0000000180)=0x3ff, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000ff8000/0x6000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000006000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68) r4 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x0, @perf_config_ext={0x1f, 0x7}, 0x200, 0x0, 0x0, 0x0, 0x3d8, 0x8ae5, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffff9) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x2000006) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x2000, @remote={0xac, 0x13}}, {0x2, 0x0, @dev}, {0x2, 0x4e20, @broadcast}, 0x122, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x6, 0x3ffffffffffffffd, 0xffd4}) keyctl$assume_authority(0x10, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000100)=0x7f, 0x4) unshare(0x60000000) 02:54:01 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x1c, r3, 0x701, 0x70bd29, 0x8200, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x8000) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r4 = gettid() rt_sigqueueinfo(r4, 0x3c, &(0x7f00000003c0)) 02:54:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:01 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000001140)) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 176.051577][ T2093] EXT4-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:01 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f00000003c0)) 02:54:01 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:01 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000001140)) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) [ 176.127413][ T2101] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 176.138733][ T2105] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 02:54:01 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:01 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f00000003c0)) [ 176.232067][ T2113] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 176.304122][ T2118] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 02:54:02 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffc6553532, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETBE(r0, 0x800454df, &(0x7f00000000c0)) 02:54:02 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r2 = gettid() rt_sigqueueinfo(r2, 0x3c, &(0x7f00000003c0)) 02:54:02 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[0x0]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3e8, 0x100, 0x70bd26, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000004800)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="046837a94c18418c35f9fed27f3f1b0ac0e5d3127ce99d08bde4fb5e148532910895d8d492510fbc626ae415bf2bb16ba6aff62613a4e16d1081cbbcf04dfa425c52db999c72fb355ac34fe9848d3ae03b6a66da5501992ed3457ce9abbe094afb982c78025d321b2f0b9605000000d816fa44e95923c19cdec8dca5a4f540cf40f16924760af50631b90ea49c76d3d0a42991339bd4ba97ed666c4601be6586a12a86a7bcef4ad3a859cc8f07597225", 0xb0}, {&(0x7f0000002340)="818891c9eb646e15f2becacfb3bb0c668e7dfa930583940200", 0x19}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="8937cc9d9afa066524eb42331ba3c46dbba08b9d0257db7da5a9f150c6fabef6778f6ad7dbd8fb65cf67d971ac24422355f124714988c7e56d5a000082e09eda0e93f8a8306b3432ab622801e4685ae13ad0f1f3603c6fa9e3a7d6d6ef8442cd45966ce2269a594d9cb522189e523e3291e72d29c62ce29cfd4d7377152dc0cc9e896afbdd524a144da7466d31982c6ce383e23a504b999518414b08526edc7e48363e001e256d6cbb12edf69aa5eef7511888eb59", 0xb5}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002380)="e03d53b84d80c491862b1298449aa3b32029f7a388c79c8700d3db2579d7d6a76e8cb8e5b323d2056e29559cce866e7587f7091beed6cb821cb7a58445fe150c68033e968319aded068e7a1c231547e1b7402498e8acfde6264fc50b5846b430ed692c58078747a168a24eb0c0165098062373346909bffd7c60e08792baac383d6be62bbb849f805d646c8731ee593d2ff18a43f7fe012de385431a0c2a424a89bbfa3aa8d819d671cdc736f694f212cccf38f5f9bbec90ca374c", 0xbb}], 0x3}}], 0x2, 0x0) 02:54:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:02 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, 0x0) [ 176.856600][ T2140] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 176.857316][ T2137] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 02:54:02 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:02 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1fe403284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x0, 0x129, 0x0}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000002c0)="44cb6cd761f90be4b31bccbaaa1bae78b9460978aed66d1caac5aa0f85053bfc4aaae4797eed2e376eaf94808044801c2cfd6d4d3a4d5d43bc474a6d24c810240ae1b900336fae47fe2017c9070bbd08a026c9e2613ae4aa9dafda689aa8e39edb7f0ad4a711a7307df7222667c822a490dbea58b975037893bf97258266c5eb", 0x80}, {&(0x7f0000000340)="7960927d61783eb30279f913d89faa9e8cca845e9b3c3092a07ff59a0e2282d0e55f8cffcf2b89b9c17d5feb55c23e90289e5b4c02a20284962425727123447c3f281fd762129ae80f851f6de3147816954d2879cf5f2e08adda60884d797010522fc2f27adad0eef41f02a75964668c7ea182d74b9a583f7eaf52dd64e9cf6ea39c12103e737917fb89", 0x8a}, {&(0x7f0000000400)="8c5c97243c092ea1365bd5d8d9367f3f6115cbbe11886f6e175e9afec1b6e5b802a4efcdc68acee6de09c5c86362c04ae4f24f7dc5dcdca530504465daf900c3a0ba01afff8e47a6b1c617bdb9eb8cbbf4e97631f16c107c1a4846ea37079f75e5d2b2e9bdff3146be18", 0x6a}, {&(0x7f0000000480)="9dae1091cf5222856336af787fc794753ab92b10e980ab5586822eacd8c76f826b122494c56469fb8a51785d8b03e15f2f86866f0c8f269b65c4fa109c6bb6d8f76e9eae56037f37d30cf065c5c532926df7e186edf03bba7306ddb563f348b553fdd6f423c542cef64847ff97505dbeedaff20ff391cb91e6f3b17e95bd8905cb525f8df2b32e6be93aefd303030ea2b5cade49", 0x94}, {&(0x7f0000000540)="82fb", 0x2}], 0x5) r1 = gettid() clone(0x200080, &(0x7f0000000140)="47f632dfe957209f8d9ade566e35e6edec3f77382ca9c0ac00ec08fc50b7536525ad1520db26f0b14b6089bb80f11911bb25b9ca6fc0cd1ac24fd24fbeb091eb61ea0c56b50638fb4070e1fd16790fb35994c4ee0f34b1a46222c2adfb49d16e15c9abbe7a4be60553505860a6cede69100e4d2b38a920ce3037215510134f69c27a21bb3eb730bf03bbed9a11ab4fb833", &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000240)="b7188868aace24067700e41af594df5e855242b9d9979f20733271e784d396948fe5580bba6565b92bf68b8e9bae2992cb23a94e2f0f4bec82486e8e9b556cd1e1abebc2b270e0c1") tkill(r1, 0x34) 02:54:02 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[0x0]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006c40)=[{{&(0x7f00000015c0)=@qipcrtr, 0x80, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000040), 0x0, 0x0) getpid() sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) write(r4, &(0x7f0000000600)="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", 0xe00) sendfile(r4, r5, 0x0, 0x12000) 02:54:02 executing program 4: r0 = syz_mount_image$erofs(&(0x7f0000000080)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000480)=[{&(0x7f00000000c0)="e2e1f5e09521e93c020000000c0024", 0xf, 0x400}, {&(0x7f0000000200)="377f0000004433e41a", 0x9, 0x480}], 0x0, &(0x7f0000000000)=ANY=[]) r1 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x2ff}]}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r5}, 0xf7b2, 0x200}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) 02:54:02 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, 0x0) 02:54:02 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[0x0]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:02 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:02 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:02 executing program 2: syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(0xffffffffffffffff, 0x7abd, 0x0, 0x0, 0x0, 0x0) [ 177.079720][ T2173] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 02:54:02 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, 0x0) 02:54:02 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 177.249917][ T2193] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 02:54:03 executing program 2: syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(0xffffffffffffffff, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = timerfd_create(0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x8, 0x0) close(r1) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00000001c0)) r2 = gettid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/125, 0x7d}, {&(0x7f0000000200)=""/226, 0xe2}, {&(0x7f0000000300)=""/209, 0xd1}], 0x3, 0xd9f, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000013) 02:54:03 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140), 0x0, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:03 executing program 0: setrlimit(0x8, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x2, 0x7f, 0x2f, 0x0, 0x2879, 0x2a02, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x2}, 0x100, 0x9, 0x6, 0x0, 0x634d, 0x401, 0x1ff}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) close(r0) r1 = socket(0x11, 0x800000003, 0x81) bind(r1, &(0x7f00000000c0)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aaa0000005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000148fcaa70000000000000006ad8e5ecc326d3a09ffc2c95400"}, 0x80) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x14b042, 0x119) openat$cgroup_type(r2, &(0x7f0000004200)='cgroup.type\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0xbaa59f2686e12593, r3, 0x1062d000) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x8040) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ftruncate(r2, 0x2008002) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0)='nl80211\x00', r2) sendfile(r0, r2, 0x0, 0x20004c) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000280)=""/249) 02:54:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:03 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:03 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f00000003c0)) 02:54:03 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140), 0x0, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:03 executing program 2: syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(0xffffffffffffffff, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:03 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f00000003c0)) [ 177.806483][ T2212] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 177.818925][ T2215] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 177.836611][ T2215] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:03 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:54:03 executing program 1 (fault-call:0 fault-nth:0): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) [ 177.910851][ T2234] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 177.957135][ T2243] FAULT_INJECTION: forcing a failure. [ 177.957135][ T2243] name failslab, interval 1, probability 0, space 0, times 1 [ 177.970354][ T2243] CPU: 0 PID: 2243 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 177.980504][ T2243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.990553][ T2243] Call Trace: [ 177.993849][ T2243] dump_stack+0x1d8/0x24e [ 177.998178][ T2243] ? devkmsg_release+0x11c/0x11c [ 178.003115][ T2243] ? show_regs_print_info+0x12/0x12 [ 178.008307][ T2243] should_fail+0x6f6/0x860 [ 178.012720][ T2243] ? setup_fault_attr+0x3d0/0x3d0 [ 178.017740][ T2243] ? fput_many+0x42/0x1a0 [ 178.022056][ T2243] ? check_preemption_disabled+0x154/0x330 [ 178.027839][ T2243] ? __se_sys_memfd_create+0xe9/0x360 [ 178.033182][ T2243] should_failslab+0x5/0x20 [ 178.037671][ T2243] __kmalloc+0x5f/0x2f0 [ 178.041819][ T2243] ? __ia32_sys_read+0x80/0x80 [ 178.046554][ T2243] ? strnlen_user+0x186/0x210 [ 178.051204][ T2243] __se_sys_memfd_create+0xe9/0x360 [ 178.056374][ T2243] do_syscall_64+0xcb/0x1e0 [ 178.060858][ T2243] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 178.066744][ T2243] RIP: 0033:0x466459 [ 178.070617][ T2243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 178.090803][ T2243] RSP: 002b:00007f71fc0d6f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 178.099187][ T2243] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 178.107131][ T2243] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000004beba8 [ 178.115098][ T2243] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 178.123046][ T2243] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 178.131001][ T2243] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 02:54:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000005c0)={r0, 0x7, 0x9, 0x5}) bind$packet(r1, &(0x7f0000000600)={0x11, 0x8, 0x0, 0x1, 0x4, 0x6, @dev={[], 0x41}}, 0x14) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x0, 0x148, 0x148, 0xffffffff, 0xffffffff, 0x350, 0x350, 0x350, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xd8, 0x148, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x2b, 0x1f, 0x4, 0x3, 0x64}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x8, 0x1, 0x1, 0x0, "c2ccb67de0312cb21c58500f7aa534df09f36858fa87d5682d0024dbe9fd963f97a9e3c6e794fb88413a242312335a371bac8d5093988aa050eb8bdb3b50a4c4"}}}, {{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@rateest={{0x68, 'rateest\x00'}, {'lo\x00', 'bridge0\x00', 0x21, 0x3, 0x8, 0x1, 0x2, 0x3, {0x2}, {0x3428c357}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x3}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x3d}, @loopback, [0xffffffff, 0xff, 0xffffff00, 0xffffffff], [0xffffff00, 0xcc903d2adf1cdf20, 0xffffffff, 0xff], 'erspan0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x11, 0x10, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x100, 0x5}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) 02:54:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140), 0x0, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:06 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r0 = gettid() rt_sigqueueinfo(r0, 0x3c, &(0x7f00000003c0)) 02:54:06 executing program 1 (fault-call:0 fault-nth:1): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:06 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003000000ed5fe1608a0c224fef"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6, 0xa00c0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getmulticast={0x14, 0x3a, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0xc1f97fc3be7ee6b9) 02:54:06 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 02:54:06 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) dup(r0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xb66}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = accept4(r3, &(0x7f0000000300)=@ax25={{0x3, @netrom}, [@null, @netrom, @default, @remote, @netrom, @rose, @rose, @null]}, &(0x7f0000000100)=0x80, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x30, r4, 0xd8797000) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 02:54:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2", 0x31, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:06 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 180.811457][ T2257] FAULT_INJECTION: forcing a failure. [ 180.811457][ T2257] name failslab, interval 1, probability 0, space 0, times 0 [ 180.818280][ T2258] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 180.850132][ T2257] CPU: 0 PID: 2257 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 180.860306][ T2257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.870352][ T2257] Call Trace: [ 180.873640][ T2257] dump_stack+0x1d8/0x24e [ 180.877958][ T2257] ? devkmsg_release+0x11c/0x11c [ 180.882876][ T2257] ? show_regs_print_info+0x12/0x12 [ 180.888054][ T2257] ? __kasan_kmalloc+0x1a3/0x1e0 [ 180.893011][ T2257] ? __kmalloc+0x174/0x2f0 [ 180.897426][ T2257] ? __se_sys_memfd_create+0xe9/0x360 [ 180.902777][ T2257] ? do_syscall_64+0xcb/0x1e0 [ 180.907439][ T2257] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 180.913486][ T2257] should_fail+0x6f6/0x860 [ 180.917884][ T2257] ? setup_fault_attr+0x3d0/0x3d0 [ 180.922894][ T2257] ? expand_files+0xd1/0x970 [ 180.927464][ T2257] ? shmem_alloc_inode+0x16/0x30 [ 180.932383][ T2257] should_failslab+0x5/0x20 [ 180.936867][ T2257] kmem_cache_alloc+0x36/0x290 [ 180.941613][ T2257] ? shmem_match+0x150/0x150 [ 180.946183][ T2257] shmem_alloc_inode+0x16/0x30 [ 180.950926][ T2257] new_inode_pseudo+0x61/0x220 [ 180.955669][ T2257] new_inode+0x25/0x1d0 [ 180.959810][ T2257] shmem_get_inode+0x113/0x630 [ 180.964554][ T2257] ? _raw_spin_unlock+0x49/0x60 [ 180.969384][ T2257] __shmem_file_setup+0x11e/0x270 [ 180.974392][ T2257] __se_sys_memfd_create+0x1ce/0x360 [ 180.979665][ T2257] do_syscall_64+0xcb/0x1e0 [ 180.984157][ T2257] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 180.990028][ T2257] RIP: 0033:0x466459 02:54:06 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 180.993901][ T2257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 181.013487][ T2257] RSP: 002b:00007f71fc0d6f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 181.021878][ T2257] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 181.029830][ T2257] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000004beba8 [ 181.037781][ T2257] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 181.045734][ T2257] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 181.053686][ T2257] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 02:54:06 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x12, &(0x7f0000000080)="441fe901c94ef581a4d01339909fe974ed27c1c6fe76cef3e2", 0x19) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000001300)="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", 0x1000, 0x4004, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x3, &(0x7f00000012c0)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x7, 0x84d, r1, &(0x7f00000000c0)="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", 0x1000, 0x3f, 0x0, 0x2}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f0000001100)="99fb88bcb368ffc2b1d82bf8f66f982037896878a1276cf7e3f7071da7dbb76fc99fdf0c527f32e092618a24245b065c50d38e471557f380d968c5defee77c8396052d8a8de29a164b24dbcbced2711fb6e1e60926c784c3521ceda8e3c480efcb3314c2a0c06c85a635110b7d26720fdf18d5854fc6525f0e3b6b4d181c997620153582621b67cc86761eb69e83509d7464bde6123ca0a4fcafac6841d5672d295bc8faebb43867b043497015b9fcf0541405b48392e943ad9fb3246c06be40bb4a1aab83a8eded84a2f6a93d370ac84d3bb3404a23b42d67ebc435e6a4a605860e7543b5ec18474769b59dc0c5dcda78bcb946d373141a6a", 0xf9, 0x8000, 0x0, 0x5, r1}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x7, 0x1, r2, &(0x7f0000001240)="480f79e32b3d6a1c26aeea9c375a1b29c0", 0x11, 0x3, 0x0, 0x1, r3}]) sendto$inet(r0, 0x0, 0x0, 0x24008738, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 02:54:06 executing program 1 (fault-call:0 fault-nth:2): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:06 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:06 executing program 2 (fault-call:5 fault-nth:0): r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:06 executing program 4: lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@v2={0x5, 0x1, 0x3, 0x8, 0xd6, "03431bc919ff410f30e625cb0f63351b7670f053cefd07b4deb36cbd03d36a7273b0acde5de79e596170519aa142450f6ddd5099421848e15ed0f7547d6fa05d6f009d9e57cf5a0727cae6ebb738bf1094596d83a764335aff544b71ae8349d39e7d666d45c33fec68d827c6ac5ed3f84647ed9c29fc9a55d72fbd030368d494565ce84529f5bd67644ebed0c76d725d1d0076fdd98352ecc5a960982f6f9df570cf8181ec9643fde792a3f204264af011597aa6d70193d8edaccad2864751b95e0f650ef054d633407cf9f4beee30fe1c753753d73a"}, 0xdf, 0x3) r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000300)={@rand_addr=' \x01\x00', 0x63, r2}) unlink(&(0x7f0000000280)='./file0\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={[], [], @empty}, @rand_addr=' \x01\x00'}}) 02:54:06 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2", 0x31, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 181.103499][ T2269] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 181.163428][ T2286] FAULT_INJECTION: forcing a failure. [ 181.163428][ T2286] name failslab, interval 1, probability 0, space 0, times 0 [ 181.168774][ T2285] FAULT_INJECTION: forcing a failure. [ 181.168774][ T2285] name failslab, interval 1, probability 0, space 0, times 0 [ 181.183583][ T2286] CPU: 1 PID: 2286 Comm: syz-executor.2 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 181.198760][ T2286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.208797][ T2286] Call Trace: [ 181.212074][ T2286] dump_stack+0x1d8/0x24e [ 181.216383][ T2286] ? devkmsg_release+0x11c/0x11c [ 181.221297][ T2286] ? show_regs_print_info+0x12/0x12 [ 181.226469][ T2286] ? check_preemption_disabled+0x154/0x330 [ 181.232248][ T2286] should_fail+0x6f6/0x860 [ 181.236638][ T2286] ? setup_fault_attr+0x3d0/0x3d0 [ 181.241643][ T2286] ? percpu_ref_tryget+0xdc/0x250 [ 181.246651][ T2286] ? __ia32_sys_io_uring_register+0xa0/0xa0 [ 181.252533][ T2286] should_failslab+0x5/0x20 [ 181.257016][ T2286] kmem_cache_alloc_bulk+0x25/0x290 [ 181.262193][ T2286] io_get_req+0x17a/0x590 [ 181.266502][ T2286] io_submit_sqe+0x83/0xe80 [ 181.270981][ T2286] ? mutex_trylock+0xb0/0xb0 [ 181.275546][ T2286] __se_sys_io_uring_enter+0x8b6/0x1e50 [ 181.281073][ T2286] ? __x64_sys_io_uring_enter+0xf0/0xf0 [ 181.286612][ T2286] ? __fsnotify_parent+0x310/0x310 [ 181.291721][ T2286] ? check_preemption_disabled+0x154/0x330 [ 181.297502][ T2286] ? __ia32_sys_read+0x80/0x80 [ 181.302243][ T2286] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 181.307767][ T2286] do_syscall_64+0xcb/0x1e0 [ 181.312245][ T2286] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 181.318114][ T2286] RIP: 0033:0x466459 [ 181.321984][ T2286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 181.341562][ T2286] RSP: 002b:00007f938c722188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 181.349944][ T2286] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 181.357979][ T2286] RDX: 0000000000000000 RSI: 0000000000007abd RDI: 0000000000000003 [ 181.365928][ T2286] RBP: 00007f938c7221d0 R08: 0000000000000000 R09: 0000000000000000 [ 181.373891][ T2286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.381841][ T2286] R13: 00007ffd710c359f R14: 00007f938c722300 R15: 0000000000022000 [ 181.389797][ T2285] CPU: 0 PID: 2285 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 181.392860][ T2289] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 02:54:07 executing program 5: sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 181.399938][ T2285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.399942][ T2285] Call Trace: [ 181.399960][ T2285] dump_stack+0x1d8/0x24e [ 181.399970][ T2285] ? devkmsg_release+0x11c/0x11c [ 181.399977][ T2285] ? show_regs_print_info+0x12/0x12 [ 181.399987][ T2285] should_fail+0x6f6/0x860 [ 181.399996][ T2285] ? setup_fault_attr+0x3d0/0x3d0 [ 181.400007][ T2285] ? security_inode_alloc+0x32/0x1d0 [ 181.400017][ T2285] should_failslab+0x5/0x20 [ 181.400026][ T2285] kmem_cache_alloc+0x36/0x290 [ 181.400036][ T2285] security_inode_alloc+0x32/0x1d0 [ 181.400046][ T2285] inode_init_always+0x387/0x810 [ 181.400056][ T2285] ? shmem_match+0x150/0x150 [ 181.400064][ T2285] new_inode_pseudo+0x90/0x220 [ 181.400079][ T2285] new_inode+0x25/0x1d0 [ 181.481460][ T2285] shmem_get_inode+0x113/0x630 [ 181.486196][ T2285] ? _raw_spin_unlock+0x49/0x60 [ 181.491017][ T2285] __shmem_file_setup+0x11e/0x270 [ 181.496041][ T2285] __se_sys_memfd_create+0x1ce/0x360 [ 181.501298][ T2285] do_syscall_64+0xcb/0x1e0 [ 181.505784][ T2285] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 181.511652][ T2285] RIP: 0033:0x466459 [ 181.515522][ T2285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 181.535102][ T2285] RSP: 002b:00007f71fc0d6f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 181.543492][ T2285] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 181.551442][ T2285] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000004beba8 02:54:07 executing program 4: io_setup(0x6, &(0x7f0000000240)=0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000e40)=ANY=[], 0x1378) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffffe, 0x11, r2, 0x864bf000) r3 = socket$nl_audit(0x10, 0x3, 0x9) io_submit(r0, 0x2, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000340)="9b", 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x5, 0x0, r3, 0x0}]) [ 181.559385][ T2285] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 181.567335][ T2285] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 181.575281][ T2285] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 02:54:07 executing program 2 (fault-call:5 fault-nth:1): r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:07 executing program 1 (fault-call:0 fault-nth:3): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2", 0x31, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:07 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0xc008ae88, &(0x7f0000001a40)={"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"}) 02:54:07 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0xfffffffffffffffe, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x87) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x10) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000440)=0xffffff10, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)='\x00', 0xfecc, 0x3fffffa, 0x0, 0x0) dup3(r0, r1, 0x0) [ 181.764222][ T2309] FAULT_INJECTION: forcing a failure. [ 181.764222][ T2309] name failslab, interval 1, probability 0, space 0, times 0 [ 181.777397][ T2309] CPU: 0 PID: 2309 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 181.782117][ T2307] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 181.787541][ T2309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.787545][ T2309] Call Trace: [ 181.787568][ T2309] dump_stack+0x1d8/0x24e 02:54:07 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 181.787579][ T2309] ? devkmsg_release+0x11c/0x11c [ 181.787587][ T2309] ? show_regs_print_info+0x12/0x12 [ 181.787600][ T2309] should_fail+0x6f6/0x860 [ 181.787610][ T2309] ? setup_fault_attr+0x3d0/0x3d0 [ 181.787620][ T2309] ? __d_alloc+0x2a/0x6a0 [ 181.787631][ T2309] should_failslab+0x5/0x20 [ 181.787640][ T2309] kmem_cache_alloc+0x36/0x290 [ 181.787649][ T2309] ? security_inode_alloc+0x32/0x1d0 [ 181.787657][ T2309] __d_alloc+0x2a/0x6a0 [ 181.787664][ T2309] ? ktime_get_coarse_real_ts64+0xcf/0xe0 [ 181.787672][ T2309] d_alloc_pseudo+0x19/0x70 [ 181.787680][ T2309] alloc_file_pseudo+0x13f/0x300 [ 181.787695][ T2309] ? alloc_empty_file_noaccount+0x70/0x70 [ 181.875048][ T2309] __shmem_file_setup+0x194/0x270 [ 181.880057][ T2309] __se_sys_memfd_create+0x1ce/0x360 [ 181.885343][ T2309] do_syscall_64+0xcb/0x1e0 [ 181.889827][ T2309] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 181.895714][ T2309] RIP: 0033:0x466459 [ 181.899587][ T2309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 181.919178][ T2309] RSP: 002b:00007f71fc0d6f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 181.927568][ T2309] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 181.935518][ T2309] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000004beba8 [ 181.943478][ T2309] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 181.951459][ T2309] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 02:54:07 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:07 executing program 1 (fault-call:0 fault-nth:4): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:07 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0xfffffffffffffffe, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="8700000002000000000000000100000006000048000000040a0000000000000507002e2f66000000040000000000000082030000000000000507002e2f66696c653004040000000000010000000000090000000000a87b3950002e2f66696c653000010000000600000000120000d800000000000000ff07002e2f66696c65303b914a0d62c51e5c205e6d80031cfbc00cbd6176eb4759c1cf15f03e473121c7b1129cc33336b22fcb26db540508ec6902cb056e556966ee05ca7ca67f4050a541f5b4b728419ea3851d35c2c363cbcef248edaef37a3b0963f200c87659b376ba79f96eab65aab8ec18666bd2b22a21651930bfa391fa773d3f6ac194c73035d8ace3e25d8b40b72928044b011880e80f6981c4490961f3d334486e44b08b20795d4d99040000ef5b353324c4bd55e393a78e53df742cc79d743879063ffddc77442e536eb8cfd67027ed182eebbe04b168dd035f33ffd5b6016b4d12470fb9544b808d4d78bba226d04f5f92d4c141d7320116b0a230efe4499d43195086e6521630edf75aca235440b28e819ac3a9445c7b19b71c2b427593a952b5f8d4374ef68842b4d397abc67b81408e7c2446d41d3a0eb1c71cfb377e44caf43d9a747f6f602837130ef0b2f12cccde82614f35d725db7ca090935faede4ab8efcf79a6d4c7308b9cc3208f5f77ff51958f48e17bca"], 0x87) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x10) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000440)=0xffffff10, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)='\x00', 0xfecc, 0x3fffffa, 0x0, 0x0) dup3(r0, r1, 0x0) [ 181.959412][ T2309] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 02:54:07 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) tkill(0x0, 0x40) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0xfffffffffffffffe, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x87) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x1, 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x10) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000440)=0xffffff10, 0x4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)='\x00', 0xfecc, 0x3fffffa, 0x0, 0x0) dup3(r0, r1, 0x0) 02:54:07 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000", 0x4a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x149842, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r1, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="c5a972"], 0x5) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x0, 0x70, 0x0, 0x69, 0xff, 0xfd, 0x0, 0x8, 0x4442e, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81, 0x2, @perf_config_ext={0xad}, 0x8, 0x10000, 0x3, 0x8, 0x400, 0xffff7fff, 0xd}) r3 = memfd_create(&(0x7f0000000080)='#\xa3\x8dnod6Q\xcc\x8d\xdag\xd3\xec#\xca\xd2\xfezW', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) 02:54:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000300)={0x6, 0x249}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x200, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) open(0x0, 0x200, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x6, &(0x7f0000000080)={0x8, 0xffffffc000000000}) fcntl$setpipe(r3, 0x407, 0x8) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1f}, 0x0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0x29) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84202, 0xc4) sendfile(r4, r5, 0x0, 0x8400f7fffff8) creat(&(0x7f0000000180)='./bus\x00', 0x1e7) 02:54:07 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 182.054771][ T2339] FAULT_INJECTION: forcing a failure. [ 182.054771][ T2339] name failslab, interval 1, probability 0, space 0, times 0 [ 182.067521][ T2339] CPU: 1 PID: 2339 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 182.077660][ T2339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.088215][ T2339] Call Trace: [ 182.091507][ T2339] dump_stack+0x1d8/0x24e [ 182.095836][ T2339] ? devkmsg_release+0x11c/0x11c [ 182.100794][ T2339] ? unwind_next_frame+0x1f0a/0x27b0 [ 182.106081][ T2339] ? show_regs_print_info+0x12/0x12 [ 182.111266][ T2339] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 182.117313][ T2339] should_fail+0x6f6/0x860 [ 182.121710][ T2339] ? setup_fault_attr+0x3d0/0x3d0 [ 182.126706][ T2339] ? ebitmap_cmp+0x1b8/0x220 [ 182.131268][ T2339] ? mls_compute_context_len+0x7dd/0x810 [ 182.136877][ T2339] ? context_struct_to_string+0x43b/0x8b0 [ 182.142572][ T2339] should_failslab+0x5/0x20 [ 182.147054][ T2339] __kmalloc+0x5f/0x2f0 [ 182.151186][ T2339] context_struct_to_string+0x43b/0x8b0 [ 182.156705][ T2339] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 182.162746][ T2339] ? security_bounded_transition+0x560/0x560 [ 182.168785][ T2339] ? symhash+0xe0/0xe0 [ 182.172825][ T2339] ? hashtab_search+0x1bf/0x200 [ 182.177647][ T2339] context_add_hash+0x13f/0x270 [ 182.182470][ T2339] ? security_sid_to_context_inval+0x40/0x40 [ 182.188891][ T2339] ? mls_context_isvalid+0x98/0x380 [ 182.194079][ T2339] ? policydb_context_isvalid+0x1b6/0x400 [ 182.199790][ T2339] security_compute_sid+0x1142/0x1d00 [ 182.205135][ T2339] ? security_transition_sid+0x90/0x90 [ 182.210565][ T2339] ? stack_trace_save+0x120/0x1f0 [ 182.215561][ T2339] ? __kasan_kmalloc+0x1a3/0x1e0 [ 182.220470][ T2339] ? __kasan_kmalloc+0x137/0x1e0 [ 182.225380][ T2339] ? kmem_cache_alloc+0x115/0x290 [ 182.230379][ T2339] ? __d_alloc+0x2a/0x6a0 [ 182.234689][ T2339] ? d_alloc_pseudo+0x19/0x70 [ 182.239339][ T2339] ? alloc_file_pseudo+0x13f/0x300 [ 182.244422][ T2339] ? __shmem_file_setup+0x194/0x270 [ 182.249601][ T2339] ? __se_sys_memfd_create+0x1ce/0x360 [ 182.255050][ T2339] ? do_syscall_64+0xcb/0x1e0 [ 182.259701][ T2339] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 182.265744][ T2339] ? _raw_spin_lock+0xa3/0x1b0 [ 182.270487][ T2339] ? _raw_spin_trylock_bh+0x1a0/0x1a0 [ 182.275837][ T2339] security_transition_sid+0x78/0x90 [ 182.281097][ T2339] inode_doinit_with_dentry+0x5e1/0x11d0 [ 182.287119][ T2339] ? sb_finish_set_opts+0x7b0/0x7b0 [ 182.292295][ T2339] ? __d_alloc+0x2a/0x6a0 [ 182.296595][ T2339] ? kmem_cache_alloc+0x115/0x290 [ 182.301591][ T2339] security_d_instantiate+0xa5/0x100 [ 182.306848][ T2339] d_instantiate+0x51/0x90 [ 182.311237][ T2339] alloc_file_pseudo+0x259/0x300 [ 182.316146][ T2339] ? alloc_empty_file_noaccount+0x70/0x70 [ 182.321845][ T2339] __shmem_file_setup+0x194/0x270 [ 182.326845][ T2339] __se_sys_memfd_create+0x1ce/0x360 [ 182.332104][ T2339] do_syscall_64+0xcb/0x1e0 [ 182.336581][ T2339] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 182.342445][ T2339] RIP: 0033:0x466459 [ 182.346314][ T2339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 182.365891][ T2339] RSP: 002b:00007f71fc0d6f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 182.374272][ T2339] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 182.382217][ T2339] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000004beba8 [ 182.390571][ T2339] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff 02:54:08 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x4000, 0x0, 0x0, 0x0, 0x0) [ 182.398516][ T2339] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 182.406482][ T2339] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 02:54:08 executing program 0: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200447d9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x1) getpeername$inet(r1, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f0000000180)=0x10) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, 0x0}, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000005000)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x23, 0x0, 0x0) sendto$inet(r4, &(0x7f00000001c0)="568e10a251485282acc831bdab58ab0da043befe", 0x14, 0x4c000, &(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @private=0xa010100}, 0x3f) connect(r3, &(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x1, 0x6, 0x80, 0x6, "a822e78784a5bf5c7a6c72ed03f20bb63fedf1bff51c61f7cfb3364794bfd0b6d7ebba1ee7bb08843144fd71c3627a99e31fa7f0ecea376d391cd0d2200c8c", 0xf}, 0x80) clock_gettime(0x0, &(0x7f0000004f80)) 02:54:08 executing program 1 (fault-call:0 fault-nth:5): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:08 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 182.448007][ T2339] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 182.466471][ T2338] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 182.472228][ T2339] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:08 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000", 0x4a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:08 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4", 0x32, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 182.669546][ T2372] FAULT_INJECTION: forcing a failure. [ 182.669546][ T2372] name failslab, interval 1, probability 0, space 0, times 0 [ 182.691155][ T2375] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 182.713446][ T2372] CPU: 1 PID: 2372 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 182.723612][ T2372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.733644][ T2372] Call Trace: [ 182.736915][ T2372] dump_stack+0x1d8/0x24e [ 182.741221][ T2372] ? devkmsg_release+0x11c/0x11c [ 182.746147][ T2372] ? show_regs_print_info+0x12/0x12 [ 182.751331][ T2372] ? _raw_spin_lock+0xa3/0x1b0 [ 182.756078][ T2372] should_fail+0x6f6/0x860 [ 182.760516][ T2372] ? setup_fault_attr+0x3d0/0x3d0 [ 182.765516][ T2372] ? _raw_spin_unlock+0x49/0x60 [ 182.770337][ T2372] ? inode_doinit_with_dentry+0x73d/0x11d0 [ 182.776113][ T2372] ? __alloc_file+0x26/0x380 [ 182.780675][ T2372] should_failslab+0x5/0x20 [ 182.785147][ T2372] kmem_cache_alloc+0x36/0x290 [ 182.789885][ T2372] ? _raw_spin_trylock_bh+0x1a0/0x1a0 [ 182.795227][ T2372] __alloc_file+0x26/0x380 [ 182.799613][ T2372] ? alloc_empty_file+0x49/0x1b0 [ 182.804519][ T2372] alloc_empty_file+0xa9/0x1b0 [ 182.809265][ T2372] alloc_file+0x57/0x4d0 [ 182.813478][ T2372] alloc_file_pseudo+0x272/0x300 [ 182.818388][ T2372] ? alloc_empty_file_noaccount+0x70/0x70 [ 182.824077][ T2372] __shmem_file_setup+0x194/0x270 [ 182.829098][ T2372] __se_sys_memfd_create+0x1ce/0x360 [ 182.834354][ T2372] do_syscall_64+0xcb/0x1e0 [ 182.838828][ T2372] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 182.844690][ T2372] RIP: 0033:0x466459 [ 182.848555][ T2372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:54:08 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:08 executing program 1 (fault-call:0 fault-nth:6): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) [ 182.868149][ T2372] RSP: 002b:00007f71fc0d6f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 182.876535][ T2372] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 182.884507][ T2372] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000004beba8 [ 182.892450][ T2372] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 182.900437][ T2372] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 182.908380][ T2372] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 02:54:08 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x2, 0x0, 0x0, 0x0) [ 182.979997][ T2385] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 182.993503][ T2390] FAULT_INJECTION: forcing a failure. [ 182.993503][ T2390] name failslab, interval 1, probability 0, space 0, times 0 [ 183.006218][ T2390] CPU: 1 PID: 2390 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 183.016347][ T2390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.026503][ T2390] Call Trace: [ 183.029775][ T2390] dump_stack+0x1d8/0x24e [ 183.034087][ T2390] ? devkmsg_release+0x11c/0x11c [ 183.039046][ T2390] ? show_regs_print_info+0x12/0x12 [ 183.044326][ T2390] should_fail+0x6f6/0x860 [ 183.048720][ T2390] ? setup_fault_attr+0x3d0/0x3d0 [ 183.053725][ T2390] ? security_file_alloc+0x32/0x1f0 [ 183.058907][ T2390] should_failslab+0x5/0x20 [ 183.063406][ T2390] kmem_cache_alloc+0x36/0x290 [ 183.068249][ T2390] security_file_alloc+0x32/0x1f0 [ 183.073249][ T2390] __alloc_file+0xba/0x380 [ 183.077638][ T2390] alloc_empty_file+0xa9/0x1b0 [ 183.082397][ T2390] alloc_file+0x57/0x4d0 [ 183.087012][ T2390] alloc_file_pseudo+0x272/0x300 [ 183.091949][ T2390] ? alloc_empty_file_noaccount+0x70/0x70 [ 183.097659][ T2390] __shmem_file_setup+0x194/0x270 [ 183.102665][ T2390] __se_sys_memfd_create+0x1ce/0x360 [ 183.107927][ T2390] do_syscall_64+0xcb/0x1e0 [ 183.112410][ T2390] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 183.118279][ T2390] RIP: 0033:0x466459 [ 183.122169][ T2390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 183.141778][ T2390] RSP: 002b:00007f71fc0d6f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 183.150185][ T2390] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 183.158131][ T2390] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000004beba8 [ 183.166085][ T2390] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 183.174046][ T2390] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 183.182083][ T2390] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 02:54:09 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4", 0x32, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:09 executing program 1 (fault-call:0 fault-nth:7): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:09 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:09 executing program 4: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:09 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0xc5b5, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x80, 0x6, 0x303, 0x0, 0x7, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0xf}, 0x14, 0xe0, &(0x7f0000000000)="79c3ffda96f37c80bae16ce93f4880b3d97413b48863380e30ab31382f697000f6958fd882d098f3e4435758c46113122d031345ec90c0988460d6fdb608a88b2fff0b8c03f73a02c9de2488382e6664d68529c5eed823d1b3f503e4fdc896f0a6fc3c593c9c438a21be154b0758c014a7d7bb54a37922f4ef8c5ce06da24e7492b152b977297ff5d870bb92b7dcc0b41d8b3fe553e86653c0af8f972e459fcf1d037aa092eb4fa3ee29489458391c777b3f4840ce2f93e7ed3b07092856728d0eab116ad0a694836d4c8eb955c0c612bdc3ffc0e55b1576dbb04dd6e47bc23e7669", 0xe2, 0x100, 0x0, 0x5, 0x8, 0xfffffff8, &(0x7f0000000180)="e867d9b66666310b65a55c9c3fc07013e0ed5c295e8545ff2b8b46fdff43966a1f626dbd04296749a2c0bdce0776a659c7764c83b0506a7bbc4aa75056f12cd604febf38db958cab7ebd74f39c145c9422f76385e16e2eebee0220d3f4a764ec645c8f8876d324bcc2a27310bed0786643d2624b7409b0006e1c35e5d807abcc29a4dc60568ca39a75072c44b489dde6d50800f524231e62e06898eb92df5a28b60c8ec3a60e6bd0576fd4916800b097116c073aa5cf895dce0495518198492cbe69d22be38210fc028813256b2ab9c9146ff106510ad171", [{0xb9, 0xfff, 0x9}, {0x1, 0x6, 0x7}, {0x2, 0x9, 0xd}, {0xffffffff, 0x5b1, 0xfc3}, {0x8, 0x1, 0x4f124aba}]}) 02:54:09 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x4, 0x0, 0x0, 0x0) 02:54:09 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 183.338939][ T2403] FAULT_INJECTION: forcing a failure. [ 183.338939][ T2403] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 183.354975][ T2402] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 183.371582][ T2403] CPU: 0 PID: 2403 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 183.381744][ T2403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.391779][ T2403] Call Trace: [ 183.395053][ T2403] dump_stack+0x1d8/0x24e [ 183.399359][ T2403] ? devkmsg_release+0x11c/0x11c [ 183.404273][ T2403] ? show_regs_print_info+0x12/0x12 [ 183.409447][ T2403] ? avc_has_perm_noaudit+0x37d/0x400 [ 183.414794][ T2403] should_fail+0x6f6/0x860 [ 183.419183][ T2403] ? setup_fault_attr+0x3d0/0x3d0 [ 183.424203][ T2403] __alloc_pages_nodemask+0x1c4/0x880 [ 183.429577][ T2403] ? selinux_syslog+0x120/0x120 [ 183.434419][ T2403] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 183.440032][ T2403] ? percpu_counter_add_batch+0x14d/0x170 [ 183.445731][ T2403] shmem_getpage_gfp+0xec9/0x2410 [ 183.450735][ T2403] ? shmem_getpage+0xa0/0xa0 [ 183.455300][ T2403] ? __kernel_text_address+0x93/0x100 [ 183.460648][ T2403] ? iov_iter_fault_in_readable+0x2d2/0x640 [ 183.466525][ T2403] ? asan.module_dtor+0x20/0x20 [ 183.471348][ T2403] shmem_write_begin+0xc5/0x190 [ 183.476189][ T2403] generic_perform_write+0x2f9/0x5a0 [ 183.481447][ T2403] ? grab_cache_page_write_begin+0x90/0x90 [ 183.487228][ T2403] ? file_remove_privs+0x630/0x630 [ 183.492314][ T2403] ? down_write+0xd8/0x150 [ 183.496703][ T2403] __generic_file_write_iter+0x239/0x480 [ 183.502307][ T2403] generic_file_write_iter+0x46d/0x600 [ 183.507738][ T2403] __vfs_write+0x5ec/0x780 [ 183.512131][ T2403] ? __kernel_write+0x340/0x340 [ 183.516958][ T2403] ? check_preemption_disabled+0x9e/0x330 [ 183.522665][ T2403] ? debug_smp_processor_id+0x20/0x20 [ 183.528019][ T2403] vfs_write+0x212/0x4e0 [ 183.532245][ T2403] __x64_sys_pwrite64+0x1af/0x240 [ 183.537254][ T2403] ? ksys_pwrite64+0x1d0/0x1d0 [ 183.541991][ T2403] do_syscall_64+0xcb/0x1e0 [ 183.546469][ T2403] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 183.552337][ T2403] RIP: 0033:0x4195f7 [ 183.556206][ T2403] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 183.575901][ T2403] RSP: 002b:00007f71fc0d6f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 02:54:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4", 0x32, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'rose0\x00'}}}}}, 0x34}}, 0x0) [ 183.584281][ T2403] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 00000000004195f7 [ 183.592226][ T2403] RDX: 0000000000000066 RSI: 0000000020000140 RDI: 0000000000000004 [ 183.600174][ T2403] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 183.608118][ T2403] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 [ 183.616077][ T2403] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 02:54:09 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:09 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x7, 0x0, 0x0, 0x0) 02:54:09 executing program 4: ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x43, 0x7f, 0x1b, 0x0, 0x0, 0xd289, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x9, 0x101, 0x4, 0x83}, 0xffffffffffffffff, 0x6, r0, 0xa) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) tkill(0xffffffffffffffff, 0x13) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x2500, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x20000, 0x100) r2 = syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x200000077, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) pipe(&(0x7f0000000140)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) close(r1) [ 183.658648][ T2403] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 02:54:09 executing program 1 (fault-call:0 fault-nth:8): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:09 executing program 0: sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x2, 0x9, 0x301, 0x0, 0x0, {0xea692c0239ca9bb6, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_STATUS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20050001) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x10000000, &(0x7f0000000680)="31357ae78f45fb685a84aa4db42b36db765a70c4a8f8ffc15e08547c922d8a2b4b6acdd5ba2a75bb", &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="341399166fd10166a0d38a271424d3cb6c6119767cac034065af420cb077d4c1c087df3d343df7a544c913a0578ea365b69dd836eee41f7000be1d45b07fc9d816594a22585cf42cdffade710f91c448a96e82b66e37037d4e8d0e3a8f4e4a4116f410c0f4ff31bd706076d4658a2d3a865a6a668716c56634002214fb0b3cc405e9728a038c418015ab175bd32b4146a6a6d42aa0cc0d68f67505f7db950c19d60661debba0b60e65403115644cc2584587955b36aac1b6bc597d8dacbb635a9df6c2b1e5aedd2601") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000700)=""/97, 0x61}], 0x2}}, {{0x0, 0x0, &(0x7f0000002140)=[{0x0}, {&(0x7f0000001a00)=""/234, 0xea}], 0x2}, 0x8000}], 0x3, 0x0, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffed3, &(0x7f0000000940)=[{&(0x7f00000006c0)='O', 0x57e}], 0x1}}], 0x4000000000003bd, 0x8800) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x400000004ffe0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)=[&(0x7f00000000c0)='[\xa7-\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\':$\x00', &(0x7f0000000180)='\'^]*(\xfa\\{%-&!\x00', &(0x7f00000001c0)='!^%\\\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='-([\x00', &(0x7f0000000280)='(&^,\xeb,*\x00'], &(0x7f0000000480)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='#\x00', &(0x7f0000000380)=',\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='\'\x00', &(0x7f0000000440)='\x00']) exit_group(0x0) 02:54:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef01000320", 0x3e, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:09 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 183.703645][ T2430] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 183.717647][ T2439] FAULT_INJECTION: forcing a failure. [ 183.717647][ T2439] name failslab, interval 1, probability 0, space 0, times 0 [ 183.773826][ T2439] CPU: 1 PID: 2439 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 183.784008][ T2439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.794059][ T2439] Call Trace: [ 183.797344][ T2439] dump_stack+0x1d8/0x24e [ 183.801660][ T2439] ? devkmsg_release+0x11c/0x11c [ 183.806588][ T2439] ? generic_file_write_iter+0x4b6/0x600 [ 183.812214][ T2439] ? show_regs_print_info+0x12/0x12 [ 183.817411][ T2439] should_fail+0x6f6/0x860 02:54:09 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x10, 0x0, 0x0, 0x0) [ 183.821824][ T2439] ? setup_fault_attr+0x3d0/0x3d0 [ 183.826843][ T2439] ? __kernel_write+0x340/0x340 [ 183.831689][ T2439] ? check_preemption_disabled+0x9e/0x330 [ 183.837403][ T2439] ? getname_flags+0xba/0x640 [ 183.838746][ T2455] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 183.842073][ T2439] should_failslab+0x5/0x20 [ 183.842088][ T2439] kmem_cache_alloc+0x36/0x290 [ 183.861668][ T2439] getname_flags+0xba/0x640 [ 183.866185][ T2439] do_sys_open+0x33e/0x7c0 [ 183.870592][ T2439] ? check_preemption_disabled+0x154/0x330 [ 183.876373][ T2439] ? file_open_root+0x450/0x450 [ 183.881234][ T2439] ? __x64_sys_pwrite64+0x1d9/0x240 [ 183.886449][ T2439] do_syscall_64+0xcb/0x1e0 [ 183.890942][ T2439] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 183.896823][ T2439] RIP: 0033:0x419544 [ 183.900707][ T2439] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 02:54:09 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:09 executing program 4: ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x43, 0x7f, 0x1b, 0x0, 0x0, 0xd289, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x9, 0x101, 0x4, 0x83}, 0xffffffffffffffff, 0x6, r0, 0xa) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) tkill(0xffffffffffffffff, 0x13) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x2500, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x20000, 0x100) r2 = syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x200000077, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) pipe(&(0x7f0000000140)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) close(r1) 02:54:09 executing program 0: r0 = pidfd_open(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='\xfc,/):/*]#\xb8[-\x00', 0x0, r3) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000000180)="fad12192324ffcd66216c2877ee28222aa576b2fef134b652d794e5a8037e30716820811d41609759dc653e44ef66fd31781ec39d482256d06a0f4d74e107efeb11ce85447953bbbda71c8c46a6e4a803561f83097d590c04e58a3223371b8bc1d637feff7e2bb297a6a1b4d9a55e6f99b28ec44656945f26f26de91144d4bcb651c46322111d43d3ae46857f4d8f2085a750935e336b1e6c2a50f5e6d404cd2e9b09b36203918aa6185fc62340cde4d107a8dee89edd3b96f85e59e448b2385ed12f6460810a53866d19e3492f8ce65e70cab9c8d41dbdccc0ecb50d223b372754c57ee7fe8d8e7d40fa334b5cc35a49b8cc02ec89b1a0d80c8997205b977047fe5dab544ca5883de0c3ec7fee8db983a5d8bd4ca611e29c52d63cdd2d31db1badec25b7c47aed8862bcc968332c80f8957c8b3a3a2d6e3a6f79e2771f91cdc923f4a316206b8a05595e5ef3fa994284c66471f2fbdf0ab80836ac786c8769ffdc88f825ce23f5d95088219de4f9877b2e69893880e528d2ae10aeed8c26a0bcc66944e5ddbe6f1f6b08c8dd320fec3a026dcce115e461135e029316a952f80acbf2ca70d1a24950632a5cd7bb2f0cc9cc1c6f4814291759e8e65f741a51b6f115924fb713f5b0abcecd372ac7e1b72d02e28ea56c804a46a2441feaa675d599221920607f3c8f2a13242cc73e61fbeaf3a5140600aec642855244e4c119f61e5e1326703f23be61ae8be0e78fd940d1198bce0172386f93aec717ff9144c275b93a212692697c9eb7beabd4b6080d915147cb91e2e2d5db5ad2c5b9edb3f639ade85d281a15a6b71b2d51a92b678ff250706a094348e5e6a9acdcb6a0b288ff96ef87a6e2c9453c1420ae8aa08ea21f768f87f96a7476dd7e3630251c157affabbf86da99283f0547ec559e54895818db89f69d18348ec91eb87da9d521fafdf897b24644c192183fda493a0b41665e2a4f0c37c9eda73eea955d93e346f0d301bb1bed73c6b0cdfbadb004d289eb798fe9d8965b632cb309a7ee7c0f74a808e176149fc2a063f89d27b36d69c6fb8cf9c57763cb8da8a98b191b00cc0b9086f4b71717a79b44eea25b8595a2b5eb0db73d0bb54d6abab6bff86039a9c83811f07dec4f1bc5beccad8200477c7793333062f3054450264d7b6ccbce1fed3f5256c03fca2f715026c58e2e227d380daf05a0d4d6d9bafda330a25dbd30abbf7e500bd4b6bedb76c6ba962ccb345a463ec8542c3db8c565981250fddbcc8baa4ffb9c474c64480ce99a47ae63519d0e106c26f9c0f7f752ae7f2a53752022428c0d7e902708a239d8277dac684317b6c1627a9aae154f89aa4eec52b5c1754132e72264ca5bcfc707c70c23329d7ab21f4c8ae3acc2aca96edeaa9b3c2b7336b1d2d4dfb644ba8297bbc285208bebbeba76ae572a7433c3c1fb204e5cb061d1c78fb446590614ee0bd3d7e0d62fd8c55ca3640f2b30bef53dc4f1cf9ff769a7009ff6f42fbb0e167983f723281b50e53b047f2348df661c5110cd6cb6bd5210b55c60d36241c37a4971a8340a300bd823076ad64068e5b3e5790a72ff3c73466bc22c2103fa982c9c2f2199ed96817cc90a1e0d46ef1e6f158dd295ce0006dfff68f98abe9735641d56be25a3d3ca1cfb97c73e3a3f4a1357bc6ff19c1757d6bbf8b95f13e6aeae7ddbd0d38edcb014a2fc7777e36fee98e384f4245d2acc175da0fa117d776a8b9dcafd6703447384b7c26f1bdf4ed2ad453df7313f58186a6dded3657cc4f1a1e14b3438efb5838c023bd961f7ead3839140297c5a5286e9a74228e4abfc164bf3ac445a49ae16c00c068bec0036bd43c891317bc42d10abc717bf5172f1f18cf0db74f69229e2d336fa688d4f92e7b12021726332acc359c6b1191ee5f9335ea988c42ad68db8df0a8ac3d49efffa7cf5528ca8f005c082ccda1e727ddbbdc46630fea015a527710d98cde17e7eb54eec949f6b43a5ce936d36f65d291cadeb1c979e1a0235934a10626c0ecf0ebd72df8a227c3591132c73cbd7815dab9f60d8e5ea827ed424f6dc6cdd9028ded451ef20298e042a9c2e74aec12e36ced6a54389b1cf68b760fadfa1dd27da42dd029dfec8c9338eeec3805419bb80174bbc478cec5a92dc6628d694c8945d7427a0111baea96912080f9980dbf06a9a14bbab0efc81bf7209484c21dcc709eb75b09aefff0a2bceef49a72e7b4647d00db50ad4c464193eef3ff851fb6c142f9b606b9b76b122056094b60bda1ed1fa158f7cf2a692ff1e5b7dd07518439319bcf559c9c710eb485f706ecec11cdaa3edf650dd3362d8c8cb2d3630d939b33cd0fb8958009e978f5c3800f48cfdac7c853ed2d3c7b786948b0997dc5a4f2c8f290efbda0454c7545658967135de409288f6e487be2cac31693623de9217fa336f74e9e358d9cee21a80c9088dd19ac0fb708110ba07148597553882bc181d452dfc33261f7fcf7f876063d92c9bbf0fa6ea594c147cacfdabea6b478243eada3aa378a78e7861eaa312219fe3ec7b0c22a57be1ef3d861936bb0c0108cf60493308409f3349bc8b8956f936335a3e7467138b8846f24e9f43a70c064a4a951a8d52f2f215f3bc21a94d1ecbc7783115c18cbb9fd46676b59172c08f7dc1f9a57db6df966f00f57607f2cff959b43fa965b091ae2400cf02086b76eabad15387e7b6978259078ff9749234e5825c3ba4b9c1c70e5e92c87a6283226971cc80943da5604546fa5449fe41cab0fb40386fedd287b004dad2703360d35a45d4de4b0f8e597120be227cc4361042511ff3a7f7c5b5e8937e7ee653281996f9fc50400fe805107bfdace328f48c2eefe534bb304a93d13011b562b997c2cfd7ebaa6c7286747bc84a0db02a1fa632c8dfef7a3b0389633a0d4c86e17f7eff200cbb5f5e11c5957ff3581247ab69dd3f3f8e46fe7681f26eabf11d7668f8c65e1d9d1b77050244518a812d62d3fb15b1da61d0d6c4dfdf4ca8c0224a7fd1e76024fc68b5e2985a494d788ec53af3ac7fd86c1e5118c5dc282e72fece44149cc063afa569f09090a84fcfbe4baf99f230f2b1614cf28b5bf662466f396cf42051a67bc705255d4dbf80a8290f188efc7843c69623aaa806e83618afc7ceb6d2f48e69f565479c4ed0f01331e0922fa4772078bc31505b8cd40986ed99fa76f98c045cc493812db6872b0ddb1e641ca6849678e57ee2bbdcc8029227ecb0d0e66e1c646dba2c24982607761bcb401908ae287e2363670e2298748b76f64dfe484ac3034eff24f6e23cf8ef6717aa87fcd0bacdb6cfdf328fac9488ff77802e25f54c84bc3331ac91722e1b888dea3225521d1d43f5c04116b10e783d07ce2b7d69aca49c745f7c6e57be8373347c0fb5c3db211f0e21c48797df56af39c13bfc7bd0219f16a1b7f915d4aa0c45c78a57f70ed816b8e588e792e6ef135557b5d43cc61d3eb43fe4915fb283efbc4838bba882bc4d53b0b531a43646399bdf97fcce71f9344cf3410717ddbc10a287c810872427cfa606f5c05faff22b9d678cda75dab86062d8d2b49463f2fb8fceeff955b7b906866a8f8c594fa5605e40cd9e63053aa69adf2802c72c4c9079a771dc36a67c523031ec39730887a97c9eaa6edd7c638da1bce83ee0cae15fad06804f683e7b0b04b50d8a50bbdf428f313171f9210add9ec4efbe8d5977a1f403af1e0b29f7b506c702dcb32780c52050aa0a00fc799fda7a4c0960bebea24cbdf0e45d4916efaffdb2a66ba44574e2a36b3fc27f2a7f30c3c7447aefe1ae4aa39e7b2c0a2720159894169516f220654e8de865941a5f1bcb29ea62241441f7407d77beaea6e403940f214a2fd4de6f8e2f98d094eb722fec1b0e7f1cb50b648f8c17d53a805a5d12df69358acc7a54c714888426c991c046a79e001f5e4ddb2759cddd273bf562fe34c916dad32c6873ff319fc18ece2be3b84f0cf168a488ed4d45e2399b5e4132e60038efdc046f208a665a909be1a9cc80cd29963a784b9c43219f5628a4de0d49bc3867b87b4a14001c53b4f31e9c326b84b56e86fdb6abd7b618620689b04aa1b7b12f816462d4ea1d2a7f87a1d12b6f28e429434c15496958228f2fed06e89ce47dfc25b4e03af64bb750981604a6efff9f5b0b5d1f7aa04bea8035fa5e635363d903ef592e78c983b7a0c65a51b23a1644a0af800a9763eff582d8101f5ce1dae8ea511c1012cdd714533b1b437ff256efcd93094a6f43e373f1b3f9a3f473a2ddc5cbfecca08bf7f806d996fc150bf54def871231ef1f1b876c3d8277593e3a84ff32b395910b9683ea65e025479f848b9aca8f74a12f97c45c1ed28ee1155c85533b048420ea0bb7eb6de8519249fdedf4f07e8c2741018a826041f89f8cd06d1bb1c7dfc876b8fc47c69b7db0b1de203b63384a3a1d55c41cbb89792bbeb4d45acee53e744a4abb43089168e85d68e3fdbffb1bd4a120b3a6c1b7e3cd54d2216bd2bfeacfa836c4960cd1a9ef177daf5f4bd2cb708a5e8a226baccb122130bb6ead9a8e50ec997cf56dc4bf4e11d0bd40a5d36ccd86c4bdaf65cd21549eed4dd575cfd0b4a164ec7f12b28a6b664299a78c9dda11071b103b42db1906166dfb254285bcb59f0662ae70e4bd6b38fe92bf7406926b1bb7f21f36ff3f903ba10c300ffc50cfc784afa1bb595da133906e99412a040308ba452ade79843478d9a450792a1da439f03cbfce3ecea9ef84794a5e9f840038cf463835cafb20fb7f88aa6f5535a0bfc53854143088903d9cffcb599cff399643e0284d2989b289d8a8f367dbbc396bad2742dae76d217acbb63d0f57d27bca2c7456a159d44ef88648b0022f2b963afbb14f887b84648a8e786bd41e5c3de1479cfd3aeaeee3ab5fe567da95f6cb9cde038d3107df36a6e69f426c54465606f4fb737f2e1f5105c2f03ea518a856eaa134355136f8808d731681218b093a0cd3f40c5c299b275fd44ecf5c7cd8c05cbe7bb8415771f905a5b9068251f05d0189969898df4800df01f27218928f6bfec358b87988b169a67051bbb01a93b4bfbd0787b1daa63f8c1c8abfb5513cc1da2d1d704611e9769b58a73759c3995197adf1e0a96223325cbd5a35391b40100830c62fdf31d00716495f1fbca13454bc472175e69b89b6dac28c228eff2e0ad02a2e56187271193705737382ec7cdbd13009362569d8728df01ee1319378bc877207e24ef2ec1e4cd67b492e9e466ca7c58e1181710b1134f7aa2a33b3e6d2f6ed9f6388b8ab90b1cb9b48a014c0042150eacf06ba239deb7b416e279ad880a0c2380414d8066cc9e9c0b039c0ed59779e4805ed45045d62beeef9311c5ab170d16a00edf608b2a50f338a9227fd532ed6d0e7550c69a329b11456a110b2dce67e8ef46d481d59e19c52985585600620ac72be859aed4056e445c77b90cf3519ac2c2a3a4c361c7215c4175d8f6243ecfa58505b5f280fe4968de9cd16893867fa4c62c566dd5c20ef7cce3bdb866bc80a400d1f0ec21bb822896f1c0d70fbe95be8eccf343cbd57396bcd5c830226b525550ccf9ca6f9e2eb65ec9d9080a6dc0defc764e403b806f73a6d80c593a17bcdba4dad4a23e78dd570ea9e643f0631d01992421a0148ae24c303b722fd7d16d715dc9d126b35796abef3245c5e3bb148a3c5b663eb9e59a1a840b60a0692bd1528d95de926fef31299c2df5557285528edd08161b99edbeb1ab3179d4a4c091dce94fbcce9a4028a671e2088f38a21325401ef34330099c8f370bae766c9d", 0x1000, 0x4, 0x0, 0x3, r1}, &(0x7f0000000040)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x560f, &(0x7f0000000140)=0x9) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001180)={"0aad5388b0abc1fc15eb4c01d9446f48", 0x0, 0x0, {0x9, 0x2}, {0x3f}, 0xffff, [0x2, 0xff, 0x7, 0xffff, 0x1, 0x800, 0x0, 0xbc, 0x1000, 0x5, 0x5, 0xab3, 0xfffffffffffffff9, 0x3, 0x1, 0x6]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001280)={{r5}, r6, 0x2, @unused=[0x328, 0x0, 0x101, 0x5], @subvolid=0x1ff}) 02:54:09 executing program 1 (fault-call:0 fault-nth:9): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) [ 183.920375][ T2439] RSP: 002b:00007f71fc0d6ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 183.928883][ T2439] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000419544 [ 183.936835][ T2439] RDX: 0000000000000002 RSI: 00007f71fc0d7000 RDI: 00000000ffffff9c [ 183.944778][ T2439] RBP: 00007f71fc0d7000 R08: 0000000000000000 R09: ffffffffffffffff [ 183.952724][ T2439] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 183.960667][ T2439] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 02:54:09 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:09 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4", 0x32, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:09 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x700, 0x0, 0x0, 0x0) 02:54:09 executing program 0: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100), 0xc, 0x0}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5, 0x813a}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x6800, 0x9) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0xe3, [], 0x0, 0x0, &(0x7f00000003c0)=""/227}, 0x0) sched_setattr(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x2}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x187) close(r3) clone(0x83800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socket(0x200000000000011, 0x0, 0x0) [ 184.045644][ T2479] FAULT_INJECTION: forcing a failure. [ 184.045644][ T2479] name failslab, interval 1, probability 0, space 0, times 0 [ 184.057803][ T2478] hub 1-0:1.0: USB hub found 02:54:09 executing program 1 (fault-call:0 fault-nth:10): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:09 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 184.096808][ T2479] CPU: 0 PID: 2479 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 184.101665][ T2478] hub 1-0:1.0: 1 port detected [ 184.106978][ T2479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.106982][ T2479] Call Trace: [ 184.107001][ T2479] dump_stack+0x1d8/0x24e [ 184.107011][ T2479] ? devkmsg_release+0x11c/0x11c [ 184.107020][ T2479] ? show_regs_print_info+0x12/0x12 [ 184.107032][ T2479] should_fail+0x6f6/0x860 [ 184.107041][ T2479] ? setup_fault_attr+0x3d0/0x3d0 [ 184.107051][ T2479] ? stack_trace_save+0x1f0/0x1f0 [ 184.107060][ T2479] ? __alloc_file+0x26/0x380 [ 184.107071][ T2479] should_failslab+0x5/0x20 [ 184.107079][ T2479] kmem_cache_alloc+0x36/0x290 [ 184.107088][ T2479] __alloc_file+0x26/0x380 [ 184.107095][ T2479] ? alloc_empty_file+0x49/0x1b0 [ 184.107103][ T2479] alloc_empty_file+0xa9/0x1b0 [ 184.107112][ T2479] path_openat+0x125/0x3da0 [ 184.107120][ T2479] ? arch_stack_walk+0xf8/0x140 02:54:09 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:09 executing program 4: ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x43, 0x7f, 0x1b, 0x0, 0x0, 0xd289, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x9, 0x101, 0x4, 0x83}, 0xffffffffffffffff, 0x6, r0, 0xa) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) tkill(0xffffffffffffffff, 0x13) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x2500, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x20000, 0x100) r2 = syz_open_dev$usbfs(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x200000077, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) pipe(&(0x7f0000000140)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) close(r1) [ 184.107132][ T2479] ? stack_trace_snprint+0x150/0x150 [ 184.107142][ T2479] ? do_filp_open+0x450/0x450 [ 184.107150][ T2479] ? __kasan_kmalloc+0x137/0x1e0 [ 184.107158][ T2479] ? kmem_cache_alloc+0x115/0x290 [ 184.107164][ T2479] ? getname_flags+0xba/0x640 [ 184.107172][ T2479] ? do_sys_open+0x33e/0x7c0 [ 184.107180][ T2479] ? do_syscall_64+0xcb/0x1e0 [ 184.107188][ T2479] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 184.107200][ T2479] do_filp_open+0x208/0x450 [ 184.107208][ T2479] ? vfs_tmpfile+0x210/0x210 [ 184.107223][ T2479] ? _raw_spin_unlock+0x49/0x60 [ 184.107231][ T2479] ? __alloc_fd+0x4f1/0x590 [ 184.107241][ T2479] do_sys_open+0x383/0x7c0 [ 184.107251][ T2479] ? check_preemption_disabled+0x154/0x330 [ 184.107260][ T2479] ? file_open_root+0x450/0x450 [ 184.107268][ T2479] ? __x64_sys_pwrite64+0x1d9/0x240 [ 184.107279][ T2479] do_syscall_64+0xcb/0x1e0 [ 184.107288][ T2479] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 184.107296][ T2479] RIP: 0033:0x419544 [ 184.107306][ T2479] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 184.107310][ T2479] RSP: 002b:00007f71fc0d6ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 184.107319][ T2479] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000419544 [ 184.107323][ T2479] RDX: 0000000000000002 RSI: 00007f71fc0d7000 RDI: 00000000ffffff9c [ 184.107328][ T2479] RBP: 00007f71fc0d7000 R08: 0000000000000000 R09: ffffffffffffffff [ 184.107333][ T2479] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 184.107338][ T2479] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 184.165725][ T2488] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 184.186344][ T2496] FAULT_INJECTION: forcing a failure. [ 184.186344][ T2496] name failslab, interval 1, probability 0, space 0, times 0 [ 184.372505][ T2496] CPU: 0 PID: 2496 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 184.382647][ T2496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.392675][ T2496] Call Trace: [ 184.395960][ T2496] dump_stack+0x1d8/0x24e [ 184.400256][ T2496] ? devkmsg_release+0x11c/0x11c [ 184.405159][ T2496] ? show_regs_print_info+0x12/0x12 [ 184.410325][ T2496] ? check_preemption_disabled+0x154/0x330 [ 184.416097][ T2496] ? debug_smp_processor_id+0x20/0x20 [ 184.421434][ T2496] should_fail+0x6f6/0x860 [ 184.425822][ T2496] ? setup_fault_attr+0x3d0/0x3d0 [ 184.430824][ T2496] ? __mod_zone_page_state+0x7f/0xd0 [ 184.436086][ T2496] ? stack_trace_save+0x1f0/0x1f0 [ 184.441082][ T2496] ? __alloc_file+0x26/0x380 [ 184.445640][ T2496] should_failslab+0x5/0x20 [ 184.450116][ T2496] kmem_cache_alloc+0x36/0x290 [ 184.454852][ T2496] __alloc_file+0x26/0x380 [ 184.459258][ T2496] ? alloc_empty_file+0x49/0x1b0 [ 184.464172][ T2496] alloc_empty_file+0xa9/0x1b0 [ 184.468923][ T2496] path_openat+0x125/0x3da0 [ 184.473397][ T2496] ? arch_stack_walk+0xf8/0x140 [ 184.478219][ T2496] ? stack_trace_snprint+0x150/0x150 [ 184.483473][ T2496] ? do_filp_open+0x450/0x450 [ 184.488120][ T2496] ? __kasan_kmalloc+0x137/0x1e0 [ 184.493033][ T2496] ? kmem_cache_alloc+0x115/0x290 [ 184.498045][ T2496] ? getname_flags+0xba/0x640 [ 184.502693][ T2496] ? do_sys_open+0x33e/0x7c0 [ 184.507261][ T2496] ? do_syscall_64+0xcb/0x1e0 [ 184.511927][ T2496] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 184.518017][ T2496] do_filp_open+0x208/0x450 [ 184.522509][ T2496] ? vfs_tmpfile+0x210/0x210 [ 184.527072][ T2496] ? _raw_spin_unlock+0x49/0x60 [ 184.531895][ T2496] ? __alloc_fd+0x4f1/0x590 [ 184.536374][ T2496] do_sys_open+0x383/0x7c0 [ 184.540765][ T2496] ? check_preemption_disabled+0x154/0x330 [ 184.546540][ T2496] ? file_open_root+0x450/0x450 [ 184.551360][ T2496] ? __x64_sys_pwrite64+0x1d9/0x240 [ 184.556531][ T2496] do_syscall_64+0xcb/0x1e0 [ 184.561007][ T2496] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 184.566886][ T2496] RIP: 0033:0x419544 [ 184.570759][ T2496] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 184.590423][ T2496] RSP: 002b:00007f71fc0d6ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 184.598806][ T2496] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000419544 [ 184.606749][ T2496] RDX: 0000000000000002 RSI: 00007f71fc0d7000 RDI: 00000000ffffff9c [ 184.614694][ T2496] RBP: 00007f71fc0d7000 R08: 0000000000000000 R09: ffffffffffffffff [ 184.622636][ T2496] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 184.630607][ T2496] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 02:54:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4", 0x32, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:10 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x4000, 0x0, 0x0, 0x0) 02:54:10 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:10 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000026cf28288b43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b5e5a076d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e795780f4580d760551b5b0a341a2d7cbdb90000bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b626c57c2691208171656d60a17e3c1c4b751c51160fbcbb58e23f3ee6148ba532e6ea09c346dfebd31a08b32808b80200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10d858e803000000b6c86adac12233f9a1fb9c2aec61ce63a38d316ef49bfe090000d50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182b5245ba0c6daeabc18cae2ed4b4390af9a9ceefd07e002cab5ebf8aad34732181feb215139f15ea7e8cb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccc421ace5e85efb17308e4e65eebaace04f4087c4f0da0d9a88f9dbb593ddebf70132a4d0175b889b8eccf707882442e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2453dcb6a2bfd299fc3cdafda323e9c7080397bc43a949d70c060d57bc88fbe09baa058b040360ab9261503def363fb099408885afc2bf9a4f8c35070669e889f5e4be1b8e0d634ebc10d697e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd96b069ef6d2857b6bf955012cf7fe50d133da86e0477e4a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7eac9e8af39044b82649b83ed4fa0f873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7436000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10241f43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a082776eb0937523f5292c12659906005cde64f903c3415c618a32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a442863d6e257cfa4ce50f3d163d442824414a7da26cc86d7e18631c2061b1c8a8e3c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09ea4770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaff80153636ed1d99346c2468dd952595d78e9583b58911fb23d29bc8d15fc0fb2daf4ea5de36099e3cddcb24ebb6eddb9a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e49d21836e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f83874ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f29eabda6e3219821e21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba88da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f32fb169974aae624ea59500f5e048b2780666d7f49af25be909984aea1bc1f33426f86b4b941c08dfe2bc8ec246ec1aae120d32405e428923f3a83d9ba5c8ff226ebf2120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e4663322dfc9245ce3e3a09a63c325bb184eb24b96f8274f72f1c55ee3d325c7496afc2f10cfea516ae436751227378f00ca0f1f6c1dc700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4942c7042e88206f641eafcc5b4ba7a7880533cdeac995d7a0084e7adc2dc12417997b03087c7b3b44b06f6158aa0b222d42a18ce0e56ffd189d9021305e5e92583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e414962792dab2414689a540d2801792756f90b37f0858efc387f5592024314a4b0ed750fa72e5948ac355e9c52a4ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50817996c09121caf47f76158362c74904f89cbc588aae84567583571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc20198233ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f676a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d301a4cb3ad66d830e10f7c1de13218ef613204c2b7c1ad48b01c208f4032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc58668e1b1b1a2c55b614d622b8de97f4ae45681ed3e73db3c78ca18c9706302a648cd3d8f829d82090a6e3af08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf5e2259b66e4364f6936fc1111f21e857edbdce9e4465f1e2b7887931f530ea14cc36bf61cfd3a80cc73ca809e544b14029b51a6a21deccfa526291c0751dd2f7f99e712fe6b15f03f8968a3eba2646a21f191bc189c7b0fdd841e7b27a89f6fc1bc23ebaa8d263872824a2d8771c97245fe858d90418629b4d5cc8b75d3d5bf3dad92407ba3acb6e66183f1afb62a5e43ede08eb144f737fc6a83d3be3c6736770000000000000000000000000000000010b3ee8700713e93ea7e50c79d7956e88f5b041350c55e4f98b28e0a6e3d4ffd000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="1400140076657468305f766972745f7769666900"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x42, 0x30000000, &(0x7f00000000c0)="b9ff0300600d698cff9e14f008004de7f9c764362ae28eff070003e0000000a08b7918080594e5d04e0d86187933b474b67b2b4b777b5c15d51e3e7b1263afc0bac3", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x10) 02:54:10 executing program 1 (fault-call:0 fault-nth:11): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:10 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 184.786852][ T2510] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 02:54:10 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4", 0x32, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:10 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 184.874548][ T2529] FAULT_INJECTION: forcing a failure. [ 184.874548][ T2529] name failslab, interval 1, probability 0, space 0, times 0 [ 184.903832][ T2529] CPU: 1 PID: 2529 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 184.914003][ T2529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.924049][ T2529] Call Trace: [ 184.927333][ T2529] dump_stack+0x1d8/0x24e [ 184.931657][ T2529] ? devkmsg_release+0x11c/0x11c [ 184.936586][ T2529] ? show_regs_print_info+0x12/0x12 [ 184.941774][ T2529] should_fail+0x6f6/0x860 [ 184.946185][ T2529] ? setup_fault_attr+0x3d0/0x3d0 [ 184.951205][ T2529] ? refcount_add_checked+0x50/0x50 [ 184.956396][ T2529] ? mutex_lock+0xa6/0x110 [ 184.960818][ T2529] ? __module_put_and_exit+0x20/0x20 [ 184.966156][ T2529] ? __kthread_create_on_node+0x126/0x410 [ 184.971853][ T2529] should_failslab+0x5/0x20 [ 184.976331][ T2529] kmem_cache_alloc_trace+0x39/0x2b0 [ 184.981610][ T2529] ? loop_set_status_from_info+0x710/0x710 [ 184.987385][ T2529] ? loop_set_status_from_info+0x710/0x710 [ 184.993164][ T2529] __kthread_create_on_node+0x126/0x410 [ 184.998681][ T2529] ? kthread_create_on_node+0x120/0x120 [ 185.004209][ T2529] ? _raw_spin_unlock+0x49/0x60 [ 185.009031][ T2529] ? bd_start_claiming+0x47c/0x590 [ 185.014112][ T2529] ? loop_set_status_from_info+0x710/0x710 [ 185.019888][ T2529] kthread_create_on_node+0xda/0x120 [ 185.025169][ T2529] ? tsk_fork_get_node+0x10/0x10 [ 185.030190][ T2529] ? loop_set_status_from_info+0x2c6/0x710 [ 185.035964][ T2529] ? memcpy+0x38/0x50 [ 185.039934][ T2529] ? memset+0x1f/0x40 [ 185.043887][ T2529] loop_configure+0x7c9/0x1380 [ 185.048625][ T2529] ? preempt_count_add+0x66/0x130 [ 185.053618][ T2529] lo_ioctl+0x820/0x23b0 [ 185.057829][ T2529] ? memset+0x1f/0x40 [ 185.061784][ T2529] ? unwind_next_frame+0x1f0a/0x27b0 [ 185.067039][ T2529] ? lo_release+0x1e0/0x1e0 [ 185.071519][ T2529] ? arch_stack_walk+0xde/0x140 [ 185.076347][ T2529] ? memset+0x1f/0x40 [ 185.080300][ T2529] ? unwind_next_frame+0x1f0a/0x27b0 [ 185.085556][ T2529] ? memset+0x1f/0x40 [ 185.089513][ T2529] ? unwind_next_frame+0x1f0a/0x27b0 [ 185.094787][ T2529] ? arch_stack_walk+0xde/0x140 [ 185.099627][ T2529] ? preempt_count_add+0x66/0x130 [ 185.104643][ T2529] ? unwind_next_frame+0x1f0a/0x27b0 [ 185.109898][ T2529] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 185.115935][ T2529] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 185.121883][ T2529] ? stack_trace_save+0x120/0x1f0 [ 185.126879][ T2529] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 185.132832][ T2529] ? __unwind_start+0x72f/0x8e0 [ 185.137652][ T2529] ? debug_smp_processor_id+0x20/0x20 [ 185.142996][ T2529] ? check_preemption_disabled+0x154/0x330 [ 185.148789][ T2529] ? debug_smp_processor_id+0x20/0x20 [ 185.154139][ T2529] ? check_preemption_disabled+0x9e/0x330 [ 185.159867][ T2529] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 185.165959][ T2529] ? rmqueue+0x49f/0x2370 [ 185.170273][ T2529] ? stack_trace_save+0x1f0/0x1f0 [ 185.175270][ T2529] ? check_preemption_disabled+0x9e/0x330 [ 185.180959][ T2529] ? __rcu_read_lock+0x50/0x50 [ 185.185690][ T2529] ? __unwind_start+0x72f/0x8e0 [ 185.190513][ T2529] ? debug_smp_processor_id+0x20/0x20 [ 185.195856][ T2529] ? is_bpf_text_address+0x280/0x2a0 [ 185.201110][ T2529] ? stack_trace_save+0x1f0/0x1f0 [ 185.206102][ T2529] ? __kernel_text_address+0x93/0x100 [ 185.211445][ T2529] ? unwind_get_return_address+0x48/0x80 [ 185.217068][ T2529] ? __rcu_read_lock+0x50/0x50 [ 185.221803][ T2529] ? arch_stack_walk+0xf8/0x140 [ 185.226626][ T2529] ? memset+0x1f/0x40 [ 185.230580][ T2529] ? unwind_next_frame+0x1f0a/0x27b0 [ 185.235837][ T2529] ? arch_stack_walk+0xde/0x140 [ 185.240665][ T2529] ? blkdev_get+0x390/0x390 [ 185.245138][ T2529] ? __rcu_read_lock+0x50/0x50 [ 185.249884][ T2529] ? _raw_spin_unlock+0x49/0x60 [ 185.254709][ T2529] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 185.260853][ T2529] ? mntput_no_expire+0x114/0xbd0 [ 185.265847][ T2529] ? stack_trace_save+0x1f0/0x1f0 [ 185.270845][ T2529] ? check_preemption_disabled+0x9e/0x330 [ 185.276535][ T2529] ? __rcu_read_lock+0x50/0x50 [ 185.281266][ T2529] ? __unwind_start+0x72f/0x8e0 [ 185.286087][ T2529] ? debug_smp_processor_id+0x20/0x20 [ 185.291430][ T2529] ? lo_release+0x1e0/0x1e0 [ 185.295916][ T2529] blkdev_ioctl+0x8f7/0x2ce0 [ 185.300477][ T2529] ? __kernel_text_address+0x93/0x100 [ 185.305818][ T2529] ? unwind_get_return_address+0x48/0x80 [ 185.311425][ T2529] ? __blkdev_driver_ioctl+0xd0/0xd0 [ 185.316682][ T2529] ? arch_stack_walk+0xf8/0x140 [ 185.321504][ T2529] ? __rcu_read_lock+0x50/0x50 [ 185.326238][ T2529] ? check_preemption_disabled+0x154/0x330 [ 185.332015][ T2529] ? avc_has_extended_perms+0x72a/0x1140 [ 185.337617][ T2529] ? avc_has_extended_perms+0xb5e/0x1140 [ 185.343225][ T2529] ? avc_ss_reset+0x3a0/0x3a0 [ 185.347877][ T2529] ? do_sys_open+0x62e/0x7c0 [ 185.352442][ T2529] block_ioctl+0xa8/0xe0 [ 185.356656][ T2529] ? blkdev_iopoll+0xf0/0xf0 [ 185.361217][ T2529] do_vfs_ioctl+0x76a/0x1720 [ 185.365777][ T2529] ? selinux_file_ioctl+0x72f/0x990 [ 185.370946][ T2529] ? ioctl_preallocate+0x250/0x250 [ 185.376027][ T2529] ? __fget+0x37b/0x3c0 [ 185.380154][ T2529] ? fget_many+0x20/0x20 [ 185.384367][ T2529] ? debug_smp_processor_id+0x20/0x20 [ 185.389707][ T2529] ? __x64_sys_pwrite64+0x1d9/0x240 [ 185.394879][ T2529] ? security_file_ioctl+0x9d/0xb0 [ 185.399959][ T2529] __x64_sys_ioctl+0xd4/0x110 [ 185.404607][ T2529] do_syscall_64+0xcb/0x1e0 [ 185.409083][ T2529] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 185.414943][ T2529] RIP: 0033:0x466217 [ 185.418823][ T2529] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 185.438398][ T2529] RSP: 002b:00007f71fc0d6f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.446777][ T2529] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000466217 [ 185.454721][ T2529] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 185.462663][ T2529] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff 02:54:10 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x19, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e38373635383433343000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000a4d0099b099d46eeb5a6d2ef5e9d5ded010040000c00000000000000e0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000004700000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000015000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="ff070000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000e0f4655fe0f4655fe0f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011500)="ed41000000080000e0f4655fe1f4655fe1f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x2080}, {&(0x7f0000011600)="8081000000601020e0f4655fe0f4655fe0f4655f00000000000001004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000", 0x60, 0x2300}, {&(0x7f0000011700)="c041000000400000e0f4655fe0f4655fe0f4655f00000000000002004000000000000800000000000af301000400000000000000000000000800000020000000", 0x40, 0x2500}, {&(0x7f0000011800)="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"/768, 0x300, 0x2580}, {&(0x7f0000011b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x8000}, {&(0x7f0000011c00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x10000}, {&(0x7f0000011d00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x10800}, {&(0x7f0000011e00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11000}, {&(0x7f0000011f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x11800}, {&(0x7f0000012000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12000}, {&(0x7f0000012100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x12800}, {&(0x7f0000012200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13000}, {&(0x7f0000012300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x13800}, {&(0x7f0000012400)="504d4d00504d4dffe1f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7032390075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x20000}, {&(0x7f0000012500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x28000}, {&(0x7f0000012600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}, {&(0x7f0000012b00)='syzkallers\x00'/32, 0x20, 0x38000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x40000}, {&(0x7f0000012d00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x407e0}, {&(0x7f0000012e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x50000}], 0x0, &(0x7f0000012f00)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) 02:54:10 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write(r0, &(0x7f00000000c0)="0c8ce2d35830c77e4a57", 0xa) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='/'], &(0x7f00000001c0)='./file0\x00', 0x0, 0x2005111, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r1, &(0x7f0000000380)=""/233, 0xffbe) 02:54:10 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) close(r3) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0xfffffffffffffffe, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x87) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000000)={{{@in=@loopback, @in=@local, 0x4e23, 0x1ff, 0x4e23, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in6=@private0}}, 0xe8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) sendto$inet6(r2, &(0x7f00000003c0)="c0", 0x1, 0x3fffffa, 0x0, 0x0) dup3(r1, r2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x1, 0xb9, 0xfb, 0x0, 0xebf089, 0x200, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1000, 0x1}, 0x40, 0xfffffffffffffff7, 0xfffffffa, 0x8, 0x6, 0x20, 0x4}, 0x0, 0x0, r0, 0x2) 02:54:11 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x40000, 0x0, 0x0, 0x0) 02:54:11 executing program 1 (fault-call:0 fault-nth:12): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff", 0x38, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 185.470609][ T2529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 185.478569][ T2529] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 185.513158][ T2534] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 02:54:11 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f) write$uinput_user_dev(r0, &(0x7f0000001d00)={'syz1\x00', {0x0, 0x7c, 0x2, 0x100}, 0x20, [0x5, 0x8, 0x8000, 0x1, 0x7fff, 0x101, 0x5, 0x6, 0x800, 0xfffffe00, 0x4, 0x6, 0x2, 0x6, 0x2, 0x9, 0x0, 0x5, 0x7, 0x3, 0x6, 0x3f, 0x5, 0x4, 0xffffffff, 0x7, 0x3, 0x2, 0x1f, 0x1f, 0xfffff000, 0x28, 0x0, 0x5, 0x5377274f, 0xf6, 0x0, 0x280, 0x8, 0x8, 0x8, 0x5, 0x0, 0x0, 0x3f, 0x0, 0xffffff80, 0x1b115058, 0x8, 0x9, 0x400, 0x8c, 0x5, 0x7, 0x7, 0x4, 0x56, 0x69db, 0x10001, 0x4, 0x0, 0x80000000, 0x7, 0x2], [0x7, 0x1ff, 0xa8, 0x7f, 0xe6d3, 0x7, 0x7, 0x800, 0xffff, 0x0, 0x8, 0x9, 0x0, 0x7fff, 0x1, 0x80, 0x48, 0x4, 0x3, 0x4, 0x7, 0x1, 0x6, 0x80000000, 0x8c15, 0x5, 0x5, 0x40, 0x1000, 0x81, 0x1, 0x5, 0x4600, 0x9, 0x4a, 0x3, 0x6b3c, 0x7, 0x62, 0x6, 0x6, 0x40, 0x401, 0x80, 0x9, 0x1, 0x0, 0x5, 0x10000, 0xfc, 0x8000, 0x7f, 0x8, 0x3, 0x7fffffff, 0x40, 0x1, 0x4, 0x800, 0x3, 0x4, 0x7, 0x80000001, 0x400], [0x4, 0x746c, 0x8, 0x1, 0x2, 0x10001, 0x3f, 0xfffffffa, 0x6, 0x6, 0x2, 0x800, 0xa0b7, 0x8000, 0x7, 0x1, 0x8001, 0x2, 0x6, 0x7, 0x8, 0x4, 0x1, 0x8, 0x4, 0xfffffffa, 0x200, 0x6d91, 0x2, 0x6, 0x2b6, 0x7, 0x88ad, 0x7, 0xfc12, 0x2, 0x7f, 0x3, 0x3f, 0x1ff, 0x3, 0x8, 0xb5, 0x4, 0x400, 0x8, 0x6, 0x5, 0x4, 0x10000, 0x5, 0x4f, 0xf83d, 0xfffffffc, 0x0, 0x4, 0x8, 0x6, 0x0, 0x7fffffff, 0x7, 0x0, 0x1, 0x7], [0x1000, 0x4313, 0x3, 0x8, 0x10001, 0x80000001, 0x0, 0x9, 0x40, 0x6, 0x6, 0x3, 0x8, 0x10001, 0x1f, 0xfffff001, 0x7, 0x6, 0x1, 0x2, 0x8, 0x401, 0x200, 0x0, 0x6, 0x5, 0xcc, 0x5c5da9b, 0x2, 0x2, 0x1, 0x1000, 0x0, 0x4, 0x1, 0x8, 0x171, 0x3f, 0x92, 0x1baf, 0x2, 0x3a1c, 0x3ff, 0x3f, 0x7, 0x7, 0xf69a, 0x9, 0x4, 0x80000001, 0x0, 0x80, 0x10000, 0x1, 0x2f6, 0x80000000, 0xfffff867, 0xffffffff, 0x39d, 0x9, 0x0, 0x80000001, 0x8, 0x6]}, 0x45c) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = dup3(r0, r1, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c]}, 0x45c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(r2, &(0x7f0000000d00)="6ddc2a4018d1375698a8b92396b7e250f8193d67d757ef966073a9525ed251179b2b9fdc56c6d4f804c66d3e0f7102a3bd7b1f93b5a682fc50d422b5419c282bd5839d06bd5ce2a63c66dd1b4ac6c01a612914e38cfad5fc327746bb9e3831bb809e3447d4fc0aba1912a874962ac379187b9aab70b04f118c09d35217e77efdd38db47015eba3601f9818dc02c259c7462f21d3cf7224ec5ec5e753d08016888493a6ddfdad5bc44bdb873937119ffaa79edc7b9af2a60b0e60fec464ea012d41e8f03b71470cddd98caecb14ec10ac6c42e85120d6d683e2dc4d78ac1e53977324b8c9e58f514455ad9d9d64fbae95f9ed6066f18904e80984a70bc4e17477e0840c1f9e8e4af230b1af95da2bd93f7ca3d2d8a75654c8c0153b34b2222d84fe21b9420b217bb96c4fb13be53ef76222c37c70829a6516eb17a4efa66c2dfa63dd0a21085bb11e110afad3725dfd1e7e9b907adb2bc0b75b494bda7d372962a16a0edac994bac63700f568f3cbe7ad7f5ace3f425c67cf654aaee061ab84d0d609b100a57a8722f0b95e71d9dd0973e72308ff1784c53b7717a951c84e1c3ccb1de7bda4730c40a5b27681532f9c22aa44dd58c740901d50ba952bf38e45747a18ea200c197b649dcb259041c7e2129fd28a1e3c8d0b7b517795116e3d041522ed44721cd562b306c9b15dbd61e2cc3284e3c95ada9f60788c5f8c9fa7eaea208c24f11714057671b0c471762ccbe31a5a5ff9a15790f1fd29abf8c5f2c87b2acda1b0966ce6e0f924808b3883a56f0c5828e3764cb15c177f6fd563ba09e66de7c0ab2e3ee7d01e0c13c4385f5a3c3c85e8d3b1a53aef22eac3563390da6afba8dca84b1281595f146de1916088227cdfd2e632b92b1a3ae053533a45e283d81e37250516546c96d389be52634f424bf59c67a62876d7f7126f9f0e0209dff78429c55cfa2b02a25532f31889697e66df0174b879703eb7ec6e15ba84ea1cc1df8cb254d2fba92ff82f2b55b6085def14c45bd05c2b076d701d3d77c0c4b6a054439f09e0ed2a146a5498d4c8054b4543c114e441c1c079ee1c82ddd4ea665fd861e176b59eea3bffc6979e3fa29289fc08bfe3bd2014d76f74295b77590dcb0b96d141ad346a7dacf4bfe5d69e35bd131fc2866df0c8bd479d2daa8b1a1894c5210d72c791070ab51dd3d1125002d4ce4db1343227f155c617d8a5acd63ac148a58762fc986ba0d1809e820ccf570dcd8183ff9fdb426e9b481f04bfe486443621dd08ad72976aeb1c389231a70547548ebac06b2d3f833bc32f2b805eb31f5617a5c3584788e1f1e6e1fd0b21887a87fe05f11cb1864bed30af2b42ec0be974b9ca087240a73ead5462e0a2326977901ece0ebca261f3ded990d7da87de66a1146ad6577f1bc0cbe2f71a8134acd9a8545b24ce1c6541bebc1ce6f104d0692d016587f0816773f0706fb179f795ab3d30282207d2efa5d12ab925e3b31caa741c14d85e22bddffc00b6f13e8af9df5629d35e4c2986e113be62fde9ecc12202853c97e821f7926fa45a8f8c574c9c788e7ce7112709936a42bc7bbcfc708ff8bf65c63aa999a119378d047190f194214246dff3ed96944cc946914a87fa24af7e17efe580d567ef2680a3a92ff0df6c19972ab90a8a17d9c180f39c1815ec07ffbcf9a73b4c4c97fffb8f85bd9b39082ac94bfd476972a4481972d7751c3056304a187275119bb9cfc10fb36568eabb5beb83348d7a8792018ea7c3250b88afb624e5622838347d9d2cf4271cd3d40308bb934d2f762e2f6bf0fa24602b31036eb05550d1bebb74b1d4a5506f6ab06aa1b9dff72f3953e1062af49c96b87437f085fa1db102e8d5fd806f2d41a3306fcfed7003668f2efc3a7877b5f42b4e23f633b34c773ef035ab932a03343204e416697d59a99ae5aef2812e79f3b725fe5a053186fc63085a01e0fb1d4e856c97b8a223e64e8008164393055e7e5cfc2bf284f4135d6b42880cae1d3080450e43710485e0ae3e1c041cd10bbdc2c4b6007a8b5fbbc0143f34ad9392449eece33ab934ef209991126470a5a866bf7ee4de908cc5e368e83bf343ca26412e83eab2da2feaf4b4e4ade4d9d381f43aa99f0c996399f6ccf766a4ca93c04fc86d601669769013a2ac74f7acc8ac53da3c29eba9cb13dad51067151169fb1bacdbb330085fcc07d71caceb24dc17915b58df6934aa2c1f9e6ee6a743e6cc26060e499306fe419c7fa4e1c166d55af70ba84445d9a545ef1f265b11f354f9ab62cdd4a27e1b02cfb2b9fcad5292852fd39e5f06499d5affc01c8b551ea3fb250f9ef556267c0c0476a235331326c3af3af9f989ab900145a42d7d08cd34d190575eb326fe50d01d993f7f01eb09980af1a347947f09eda6d740adc05fac5d63095f3c447c629d87c4547e81f1294f8eb42ee5a39f806e98b93aaa4af275163957549f27246f7fb379fc34043ad515ad3c533368caca156bc91cd3d4647c7db1e41916b8a3c31da380e3d12824be2fd864b5755fd3621ecb5fee4473f33c4d69ef134553b4f4c85b4448b5b02e83407137dd32e37a21d2421973d67cad33907cfa46143b55b8dfb99a2600e736ebaaf2328ebdffb7eb616ad5b3217eee5bfc77cae0ab4d006cf374654d56c701ee795ad694d04252d46cd38e6d2dad82f8e2f499840801bf28958a3814fe9180124091de83d6e5db219abd075e7732b3835404526a68c9771c9467d5d22ab78044eac5bba581a959b29d485b8a742a94160dcd3cf6875efefd639641bdef9f428e26501b2f5d964aaee89aeaccae8062ed469e1421c59d46c267bc19c251eeddf8d39495547f92ab1883dd1ebc8540b3570595f34a97a56d4faac3a9e520f0a570393f759b199044037fdeb8bf187fbcb702cec548f02f94c383b75d7153b4189ba20ce8d3f1d5e07ad83143803bf87a55c56ff5218f0c1365158726c657af502e27ca269952ae9fefaeabb100cbcb7bf63a735f92a5267547ff041749abce469aaed7b4f3cb55181446c885cd626830fd09253589c4d9a21fdc43ef3b59518a998a3e4d79ee3daceb4834f81fbb41784d3946a02717dce41dbe1962e920de070e7a60ac97b0416fbd0bb38e30e31e0c7aef4c938f4700c55b824f015838c7bd1945e16b9cfcd0fc58fc24b3cc130d433db435ef1185841357b35f3c1fffc2a6259c80980dab712e48070bea97cb1e22af882bf3487b7ee27c361d1c9ebd704a4c62f6383ade17ae5af6820456a6809c02d4439eb2e096f2e18a4333374109a80b45b7fdaaeb8faf035c3df107bc45292fd4fa6187fb16455f2d522d778475ce8f0302c3288a59d628d0dea3fa9abc2bcde00ce33c52f672bc932e8f8329ef8aaacf9f29d5f2788993135ef35bbd9e0b94049deafa478049e16f8b103a7d91ec716f4003676d3ffa7561f5b7c6b706851a16858462b443f58ba5e25bf907f22c223f6bd55d26cec8468894cd84670e390486444058e4b1ad62317101e5f7e50c85d4c6e064d29ad5312e11bd2f05babfa00edf65739ebbf991e33538b15d942083cf93b9c6f760a6ae15babdb452b345fb2aeeeb00d7228ec2afdcde154f4b620d7444d174f2d4317fc492a791c9518757199eecbf99dc1412f13740f3f6e80ec253f072fc492a44da7b7410e1b7a4f7efaa5ad8c348325216c075ff42f6993dfcc36a4fe019a72fc83c4c0eb3b838cdd325f64c5acef7a981ec79c4c4eb402d650d55a8fdcc96f9f19b4beea702e5a78c7994e81904863c0c4a70d0460fd63aada1ec71dcd027fa2213b30b4b33f8e7b2e06462927480a410fc88bc0e750735ade53c1fd6105333a43756e326c482e967969ffd7a849c16c74a9fde7853aea9e7db3a380cadfdc6f42ab63f644d27e315ab0a50a53d75b9b1751e4c168090544ade5c5953b04ba741c6db54f4f3d5e15aca6fbad0a3db7e64c877a3de9259c1c05bd6859c4246e09a763d0dc2335bc6525908d31975b730b4cfc6eae058866bcd38843be99095351136a50353013a25c3f84301f8805c82f73ab89410a45ec9937042688334767a5922aa0dca611848c628b6b2ca5ffc2365e559eacb2402842fca5d312b727c519f03f0d06a44884301a9ac078893be788435ce8330b1abf1ed43763fd4a8b38998493c788c8b38050ea802746df215872774412b90c10188eab4a38decec4ba875eea08357caa1d415bac87871cd8310c6d2c6da0c164f2db807bf74eff30d2f2a263dfb9b165f42ad85c6347f8cf7df35803af1bdf63a995256ae72bee438ea1ba62ce4031d06aa6acf63be0d97a6d64d2321d55be620f821c69fcde19f6b2206f995fc0beccc5e47059c2f6a4df0a8110c782304a840e19a193a6ca6b34ae85fc58cf5ef9a182779ad9df8daa5892618466e5660e822bef556b109f858260b97b2f76de6c3e959f3825b433fa6c339293601c05c16c325bd0af92ba59f907ce8f88deab31dab599eceb61dca08878e43d644e4c753524a96f11ca850b3d799f4f945b03ad4a89a9b471c398706faca4a0e487f6e26c935c979f7e38e1422dec47482f4e3c98ed4ade101fe5ce395cc94eeb3646e97f706e26b62c64408c675ab12c16edcf1bddba74defd879762f197a9bf6830a72500ce49af7a204a68619f2e98b8624b5ddec79b7b941e63e8948e7a4623a5a0a52b490a6ee3acf61ca4a0ea4074899ddcf888ec0c419517eb6336ca6d70d50b996b33a823da8dc6713e4d2c84bdc702c8b568da46ae0aa1b6cfc5e7d11a27680ee6306d506f0a9254ccbecf49a624a36c97c88641181acd4d68bd30f55d5004085a9b5ca07f88585865daf6743c4f4b8dd167fc5dd12a15ccf444bafe26d433a8979922309a0ae5f3e98c5e8d998e601781643daf31428ad35cfd3ac8d5654999e3c0adeafa06efe8054edf51b13e0876e8f5d7f2cc1428a3888c41d5e4e18e64ebe9e0b122d70d83534d085bf1da8f6daf9b08e72eb5903804baa7a96f22088e3aa1f1d8cc3812c00c763b714830f43775fb4e60e64951a2dae8d33141c48263ec7a01d45a62d31e7fe378728b905fbdf686e581f60075372901dd47e135ee80b888f4e35b40d5faee15aa9a17324affc433900b6bd34d34649650dba09d3aac5ddad3b1628c4e20688a28a6214bf7d2a5932699414874ffc9aef0ec9f6496a2fea432832f22118f6dd85680c61c2cc9ecdae51f97245762d9869278a486c3499772fba3284c5ec452e0ad8a5d2085b6102262f1be445378657de333f3a8008c06e6cf4e3eb6c4fb8cc81cb1a731a3ef292be6621ee473137aa8befb5782aa4ad2c9957abd160d30721805107126cc440ec8c5529dd35f767780a14698670fb4171ebcc36c39f319c7444f02bd0c7c9227ff23c5714c97cf74ad5ac3683a9d87940d9acc99c78b8f8f1221028f8e5d7faeca9a21ca189c2fe7cedeaeb9651fd02c1d3d11f6468cec81ea3df425b051cc4b2d57e26ae2a3c79287c502dace575bce1dd30a3bb63bbed3932f194debfb0963f95667cfd674e2aed2d05c5bc1f1231baff21a4647651990a3ef65663d418f2bdaa07428371d74c62835c765c1b5880d94fecf9d6d9595b0061b504fb75f88b261c9a9adca032e8a3ac1b7a1c52f6be67d82c1fc4099203734b79968971498548d37d7690c043da8bdcd7a11ab49fe8a85dc65ea774ce8fe712cfb3a93007bb2df277694d2d301753d062bf4a4cf53dd20f96f6d73c74902c60e4ad5088e911844bdee05f70d4017021d1467f6a66052c5da1dcc613", 0x1000) r4 = syz_io_uring_complete(0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {0xfff9, 0x2c, 0x2, 0xfffe}, 0x19, [0x6, 0x1ff, 0x5, 0xffffffff, 0x200, 0x240000, 0x1, 0x3, 0xc7, 0x7, 0x88f7, 0x8, 0xff, 0x0, 0x1, 0x7, 0x200, 0x9, 0x5, 0xdd, 0x2, 0x7fff, 0x3ff, 0xfff, 0x1, 0x17, 0x1, 0xffff8fc7, 0x2, 0x0, 0x3, 0x7fff, 0x7ff, 0xffff7fff, 0xfffffffc, 0x81, 0x5, 0xff, 0x9, 0x4, 0x8000, 0x7fff, 0xadd, 0x7fffffff, 0x5, 0x15c7, 0xfff, 0x5, 0x5, 0x1, 0x4, 0xfff, 0x7, 0xffffff01, 0x9, 0xfffffffc, 0x3ff, 0x7, 0x101, 0x0, 0xffffffff, 0x5, 0x10000, 0x8000], [0xbf69, 0x3, 0x4eaee5da, 0xdf, 0xffff, 0x9, 0xd40e, 0x4, 0xffffffff, 0x5, 0x100, 0xfff, 0x6, 0x40, 0x8000, 0x2, 0x4, 0x3f, 0x4, 0x2, 0x200, 0x3, 0x4, 0x3, 0x0, 0x5, 0x0, 0x0, 0x1f, 0x72d4, 0x3, 0xffff8000, 0xb2f3, 0x10, 0x7, 0x0, 0x1000, 0x100200, 0x4, 0x8, 0x7f, 0x0, 0xb61, 0x835, 0x5, 0x10001, 0x9, 0x4, 0x1, 0x7ff, 0x200, 0x7, 0x202ee496, 0xfffffffc, 0x9, 0x800, 0x6, 0x6, 0xfff, 0xaf, 0x2, 0x6, 0x3, 0x6], [0x0, 0x87e, 0x8001, 0x100, 0x2, 0x20, 0x6, 0x9d, 0xffffff47, 0x8, 0xc566, 0x0, 0x8001, 0x61f5, 0x6, 0x7, 0xffff7fff, 0x1, 0x6, 0x1f, 0x20, 0x8001, 0xef4a, 0x1, 0x0, 0x7, 0x8, 0x10001, 0x6, 0x200, 0x56a, 0x3ff, 0x84, 0xfff, 0x3, 0x8, 0x8, 0x95ea, 0xac1, 0x8, 0x20, 0x5, 0x5d, 0x9, 0x0, 0xfff, 0xe46, 0x10001, 0x401, 0x0, 0x3, 0x4, 0x40, 0x8, 0x6, 0x6, 0xfffffff7, 0x400, 0x5, 0x6, 0x3c, 0x9, 0x7, 0x3], [0x0, 0x0, 0x4, 0x2e, 0x8a, 0x7f, 0x4, 0x401, 0x400, 0x3, 0x22, 0x7fff, 0x4, 0x9, 0x4, 0x7, 0x6, 0x1c00, 0xd0, 0xfffffff8, 0x1ff, 0x8, 0x7, 0x6, 0x1, 0x3f, 0x6, 0x8, 0x4, 0x3, 0x800, 0x0, 0x0, 0xc6a8, 0x0, 0x80000, 0x7fff, 0x97e5, 0x7f, 0x8, 0x1, 0x9, 0xfffffffa, 0x8, 0x0, 0x3, 0x3, 0x7ff, 0x12d, 0x0, 0x6, 0xfffff800, 0x7, 0x7, 0x1, 0x8, 0x1, 0x1, 0x401, 0x1f, 0x400, 0x0, 0x10001, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000040)={{0x52a2, 0x7ff, 0xffff, 0x90}, 'syz1\x00', 0x55}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 185.553571][ T2552] FAULT_INJECTION: forcing a failure. [ 185.553571][ T2552] name failslab, interval 1, probability 0, space 0, times 0 [ 185.567849][ T2552] CPU: 0 PID: 2552 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 185.578005][ T2552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.588052][ T2552] Call Trace: [ 185.588071][ T2552] dump_stack+0x1d8/0x24e [ 185.588082][ T2552] ? devkmsg_release+0x11c/0x11c [ 185.588091][ T2552] ? show_regs_print_info+0x12/0x12 [ 185.588101][ T2552] ? set_next_entity+0x420/0x7c0 [ 185.588111][ T2552] should_fail+0x6f6/0x860 [ 185.588121][ T2552] ? setup_fault_attr+0x3d0/0x3d0 [ 185.588132][ T2552] ? _raw_spin_unlock_irq+0x4a/0x60 [ 185.588140][ T2552] ? __schedule+0xa9f/0x1170 [ 185.588149][ T2552] ? __kernfs_new_node+0xdb/0x6d0 [ 185.588163][ T2552] should_failslab+0x5/0x20 [ 185.593783][ T2557] input: syz1 as /devices/virtual/input/input7 [ 185.595748][ T2552] kmem_cache_alloc+0x36/0x290 [ 185.595763][ T2552] __kernfs_new_node+0xdb/0x6d0 [ 185.655126][ T2552] ? kernfs_new_node+0x160/0x160 [ 185.660038][ T2552] ? preempt_schedule+0x16b/0x190 [ 185.665046][ T2552] ? schedule_preempt_disabled+0x20/0x20 [ 185.670650][ T2552] ? enqueue_task_fair+0x51b/0xc10 [ 185.675734][ T2552] ? check_preemption_disabled+0x9e/0x330 [ 185.681431][ T2552] ? ___preempt_schedule+0x16/0x20 [ 185.686521][ T2552] kernfs_create_dir_ns+0x90/0x220 [ 185.691608][ T2552] internal_create_group+0x294/0xf10 [ 185.696868][ T2552] ? rt_mutex_setprio+0xd10/0xd10 [ 185.701868][ T2552] ? try_to_wake_up+0xa69/0x12a0 [ 185.706784][ T2552] ? sysfs_create_group+0x20/0x20 [ 185.711777][ T2552] ? __loop_update_dio+0x23d/0x580 [ 185.716888][ T2552] loop_configure+0xdd7/0x1380 [ 185.721634][ T2552] lo_ioctl+0x820/0x23b0 [ 185.725857][ T2552] ? memset+0x1f/0x40 [ 185.729923][ T2552] ? unwind_next_frame+0x1f0a/0x27b0 [ 185.735178][ T2552] ? lo_release+0x1e0/0x1e0 [ 185.739648][ T2552] ? arch_stack_walk+0xde/0x140 [ 185.744508][ T2552] ? memset+0x1f/0x40 [ 185.748462][ T2552] ? unwind_next_frame+0x1f0a/0x27b0 [ 185.753733][ T2552] ? memset+0x1f/0x40 [ 185.757686][ T2552] ? unwind_next_frame+0x1f0a/0x27b0 [ 185.762948][ T2552] ? arch_stack_walk+0xde/0x140 [ 185.767779][ T2552] ? preempt_count_add+0x66/0x130 [ 185.772772][ T2552] ? unwind_next_frame+0x1f0a/0x27b0 [ 185.778027][ T2552] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 185.784149][ T2552] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 185.790106][ T2552] ? stack_trace_save+0x120/0x1f0 [ 185.795104][ T2552] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 185.801058][ T2552] ? __unwind_start+0x72f/0x8e0 [ 185.805891][ T2552] ? debug_smp_processor_id+0x20/0x20 [ 185.811234][ T2552] ? check_preemption_disabled+0x154/0x330 [ 185.817027][ T2552] ? debug_smp_processor_id+0x20/0x20 [ 185.822369][ T2552] ? check_preemption_disabled+0x9e/0x330 [ 185.828076][ T2552] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 185.834122][ T2552] ? rmqueue+0x49f/0x2370 [ 185.838422][ T2552] ? stack_trace_save+0x1f0/0x1f0 [ 185.843438][ T2552] ? check_preemption_disabled+0x9e/0x330 [ 185.849144][ T2552] ? __rcu_read_lock+0x50/0x50 [ 185.853887][ T2552] ? __unwind_start+0x72f/0x8e0 [ 185.858711][ T2552] ? debug_smp_processor_id+0x20/0x20 [ 185.864060][ T2552] ? is_bpf_text_address+0x280/0x2a0 [ 185.869317][ T2552] ? stack_trace_save+0x1f0/0x1f0 [ 185.874310][ T2552] ? __kernel_text_address+0x93/0x100 [ 185.879652][ T2552] ? unwind_get_return_address+0x48/0x80 [ 185.885255][ T2552] ? __rcu_read_lock+0x50/0x50 [ 185.889988][ T2552] ? arch_stack_walk+0xf8/0x140 [ 185.895244][ T2552] ? memset+0x1f/0x40 [ 185.899196][ T2552] ? unwind_next_frame+0x1f0a/0x27b0 [ 185.904555][ T2552] ? arch_stack_walk+0xde/0x140 [ 185.909384][ T2552] ? blkdev_get+0x390/0x390 [ 185.913876][ T2552] ? __rcu_read_lock+0x50/0x50 [ 185.918612][ T2552] ? _raw_spin_unlock+0x49/0x60 [ 185.923432][ T2552] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 185.929488][ T2552] ? mntput_no_expire+0x114/0xbd0 [ 185.934496][ T2552] ? stack_trace_save+0x1f0/0x1f0 [ 185.939511][ T2552] ? check_preemption_disabled+0x9e/0x330 [ 185.945212][ T2552] ? __rcu_read_lock+0x50/0x50 [ 185.949948][ T2552] ? __unwind_start+0x72f/0x8e0 [ 185.954776][ T2552] ? debug_smp_processor_id+0x20/0x20 [ 185.960120][ T2552] ? lo_release+0x1e0/0x1e0 [ 185.964602][ T2552] blkdev_ioctl+0x8f7/0x2ce0 [ 185.969168][ T2552] ? __kernel_text_address+0x93/0x100 [ 185.974510][ T2552] ? unwind_get_return_address+0x48/0x80 [ 185.980113][ T2552] ? __blkdev_driver_ioctl+0xd0/0xd0 [ 185.985366][ T2552] ? arch_stack_walk+0xf8/0x140 [ 185.990187][ T2552] ? __rcu_read_lock+0x50/0x50 [ 185.994925][ T2552] ? check_preemption_disabled+0x154/0x330 [ 186.000727][ T2552] ? avc_has_extended_perms+0x72a/0x1140 [ 186.006465][ T2552] ? avc_has_extended_perms+0xb5e/0x1140 [ 186.012068][ T2552] ? avc_ss_reset+0x3a0/0x3a0 [ 186.016728][ T2552] ? do_sys_open+0x62e/0x7c0 [ 186.021297][ T2552] block_ioctl+0xa8/0xe0 [ 186.025522][ T2552] ? blkdev_iopoll+0xf0/0xf0 [ 186.030088][ T2552] do_vfs_ioctl+0x76a/0x1720 [ 186.034649][ T2552] ? selinux_file_ioctl+0x72f/0x990 [ 186.039838][ T2552] ? ioctl_preallocate+0x250/0x250 [ 186.044937][ T2552] ? __fget+0x37b/0x3c0 [ 186.049066][ T2552] ? fget_many+0x20/0x20 [ 186.053284][ T2552] ? debug_smp_processor_id+0x20/0x20 [ 186.058624][ T2552] ? __x64_sys_pwrite64+0x1d9/0x240 [ 186.063807][ T2552] ? security_file_ioctl+0x9d/0xb0 [ 186.068893][ T2552] __x64_sys_ioctl+0xd4/0x110 [ 186.073541][ T2552] do_syscall_64+0xcb/0x1e0 [ 186.078016][ T2552] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 186.083878][ T2552] RIP: 0033:0x466217 [ 186.087774][ T2552] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 186.107348][ T2552] RSP: 002b:00007f71fc0d6f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.115731][ T2552] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000466217 [ 186.123693][ T2552] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 186.131643][ T2552] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 186.139588][ T2552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 186.147534][ T2552] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 02:54:11 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x400000, 0x0, 0x0, 0x0) 02:54:11 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:11 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5686a6df, 0xfffffffffffffffe}, 0xc810, 0x1, 0x800000, 0x0, 0x0, 0x0, 0x1ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0xfffffffffffffe3b) creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) creat(0x0, 0x35) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42c00) open$dir(0x0, 0x4081, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x40000000, @loopback}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r1, 0x0, 0x44, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @empty}, 0x3f) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000100)=0x2, 0x4) mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x2000000, 0x810, 0xffffffffffffffff, 0xf1912000) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) 02:54:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff", 0x38, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 186.170462][ T2562] input: syz1 as /devices/virtual/input/input8 [ 186.177152][ T2552] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 186.178362][ T2555] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 186.195825][ T2552] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:11 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0']) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) lsetxattr$system_posix_acl(&(0x7f0000000200)='./bus/file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000040)={{}, {}, [{0x2, 0x4, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2, r1}, {0x2, 0x6, r3}, {0x2, 0x0, r1}, {0x2, 0x5, r5}]}, 0x54, 0x0) 02:54:11 executing program 1 (fault-call:0 fault-nth:13): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:12 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:12 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000002500)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}}, 0x0, 0x0, &(0x7f0000002900)={0xa0, 0x0, 0xe3b4, {{0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfff, 0x0, 0x0, 0xc000}}, {0x0, 0x8}}}, 0x0}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000300)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275730f945caa95781470e24503702c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"]) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syncfs(r1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='pstore\x00', 0x0, 0x0) 02:54:12 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x800000, 0x0, 0x0, 0x0) 02:54:12 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:12 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2) r2 = socket$inet6(0xa, 0x401000000001, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x400, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f0000000300)=0x1c) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000440)=""/4096) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x2, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000200)={0x1, 0x0, 0x5683f5ec, 0x1}) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x1, 0x2, 0x6, 0xff, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x3, 0x3}, 0x1000, 0x3, 0x8, 0x7, 0x4ba, 0x671, 0x1000}, 0xffffffffffffffff, 0x8, r1, 0x2) close(r2) clock_gettime(0x0, &(0x7f00000000c0)) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1145042, 0x0) sendfile(r2, r4, 0x0, 0x8000fffffffa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf41be7ff89490ca3, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 02:54:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff", 0x38, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 186.283645][ T2576] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 186.295200][ T2581] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 186.312368][ T2581] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 186.326199][ T2588] overlayfs: conflicting lowerdir path [ 186.354219][ T2586] FAULT_INJECTION: forcing a failure. [ 186.354219][ T2586] name failslab, interval 1, probability 0, space 0, times 0 [ 186.366978][ T2586] CPU: 0 PID: 2586 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 186.377111][ T2586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.387161][ T2586] Call Trace: [ 186.390447][ T2586] dump_stack+0x1d8/0x24e [ 186.394759][ T2586] ? devkmsg_release+0x11c/0x11c [ 186.399677][ T2586] ? arch_stack_walk+0xf8/0x140 [ 186.404510][ T2586] ? show_regs_print_info+0x12/0x12 [ 186.409692][ T2586] should_fail+0x6f6/0x860 [ 186.414093][ T2586] ? setup_fault_attr+0x3d0/0x3d0 [ 186.419104][ T2586] ? check_preemption_disabled+0x9e/0x330 [ 186.424801][ T2586] ? radix_tree_node_alloc+0x18c/0x370 [ 186.430261][ T2586] should_failslab+0x5/0x20 [ 186.434746][ T2586] kmem_cache_alloc+0x36/0x290 [ 186.439488][ T2586] ? __kasan_kmalloc+0x1a3/0x1e0 [ 186.444510][ T2586] radix_tree_node_alloc+0x18c/0x370 [ 186.449782][ T2586] ? blkdev_ioctl+0x8f7/0x2ce0 [ 186.454548][ T2586] ? block_ioctl+0xa8/0xe0 [ 186.458951][ T2586] ? do_vfs_ioctl+0x76a/0x1720 [ 186.463697][ T2586] ? __x64_sys_ioctl+0xd4/0x110 [ 186.468530][ T2586] idr_get_free+0x2aa/0x900 [ 186.473015][ T2586] idr_alloc_cyclic+0x1ef/0x5d0 [ 186.477855][ T2586] ? idr_alloc+0x2f0/0x2f0 [ 186.482277][ T2586] ? _raw_spin_lock+0xa3/0x1b0 [ 186.487039][ T2586] __kernfs_new_node+0x122/0x6d0 [ 186.491965][ T2586] ? kernfs_new_node+0x160/0x160 [ 186.496886][ T2586] ? preempt_schedule+0x16b/0x190 [ 186.501990][ T2586] ? schedule_preempt_disabled+0x20/0x20 [ 186.507607][ T2586] ? enqueue_task_fair+0x51b/0xc10 [ 186.512815][ T2586] ? check_preemption_disabled+0x9e/0x330 [ 186.518548][ T2586] ? ___preempt_schedule+0x16/0x20 [ 186.523672][ T2586] kernfs_create_dir_ns+0x90/0x220 [ 186.528770][ T2586] internal_create_group+0x294/0xf10 [ 186.534048][ T2586] ? rt_mutex_setprio+0xd10/0xd10 [ 186.539053][ T2586] ? try_to_wake_up+0xa69/0x12a0 [ 186.543970][ T2586] ? sysfs_create_group+0x20/0x20 [ 186.548973][ T2586] ? __loop_update_dio+0x23d/0x580 [ 186.554066][ T2586] loop_configure+0xdd7/0x1380 [ 186.558898][ T2586] lo_ioctl+0x820/0x23b0 [ 186.563118][ T2586] ? memset+0x1f/0x40 [ 186.567084][ T2586] ? unwind_next_frame+0x1f0a/0x27b0 [ 186.572348][ T2586] ? lo_release+0x1e0/0x1e0 [ 186.576833][ T2586] ? arch_stack_walk+0xde/0x140 [ 186.581660][ T2586] ? memset+0x1f/0x40 [ 186.585623][ T2586] ? unwind_next_frame+0x1f0a/0x27b0 [ 186.590889][ T2586] ? memset+0x1f/0x40 [ 186.594846][ T2586] ? unwind_next_frame+0x1f0a/0x27b0 [ 186.600108][ T2586] ? arch_stack_walk+0xde/0x140 [ 186.604940][ T2586] ? check_preemption_disabled+0x9e/0x330 [ 186.610639][ T2586] ? debug_smp_processor_id+0x20/0x20 [ 186.616008][ T2586] ? check_preemption_disabled+0x9e/0x330 [ 186.621724][ T2586] ? check_preemption_disabled+0x9e/0x330 [ 186.627423][ T2586] ? debug_smp_processor_id+0x20/0x20 [ 186.632773][ T2586] ? debug_smp_processor_id+0x20/0x20 [ 186.638126][ T2586] ? check_preemption_disabled+0x9e/0x330 [ 186.643824][ T2586] ? __rcu_read_lock+0x50/0x50 [ 186.648571][ T2586] ? debug_smp_processor_id+0x20/0x20 [ 186.653935][ T2586] ? find_next_bit+0xc6/0x110 [ 186.658602][ T2586] ? cpumask_next+0xc/0x20 [ 186.663008][ T2586] ? check_preemption_disabled+0x9e/0x330 [ 186.668708][ T2586] ? select_idle_smt+0xa2/0x240 [ 186.673551][ T2586] ? debug_smp_processor_id+0x20/0x20 [ 186.678920][ T2586] ? __rcu_read_lock+0x50/0x50 [ 186.683674][ T2586] ? check_preemption_disabled+0x9e/0x330 [ 186.689403][ T2586] ? __rcu_read_lock+0x50/0x50 [ 186.694149][ T2586] ? cpuacct_charge+0xe5/0x160 [ 186.698897][ T2586] ? enqueue_entity+0xa8c/0xd10 [ 186.703742][ T2586] ? psi_task_change+0x924/0xe50 [ 186.708661][ T2586] ? check_preempt_wakeup+0x1a3/0x6f0 [ 186.714017][ T2586] ? ttwu_do_wakeup+0x16f/0x470 [ 186.718847][ T2586] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 186.724979][ T2586] ? memset+0x1f/0x40 [ 186.728940][ T2586] ? unwind_next_frame+0x1f0a/0x27b0 [ 186.734205][ T2586] ? arch_stack_walk+0xde/0x140 [ 186.739044][ T2586] ? blkdev_get+0x390/0x390 [ 186.743525][ T2586] ? __rcu_read_lock+0x50/0x50 [ 186.748269][ T2586] ? _raw_spin_unlock+0x49/0x60 [ 186.753115][ T2586] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 186.759160][ T2586] ? mntput_no_expire+0x114/0xbd0 [ 186.764163][ T2586] ? stack_trace_save+0x1f0/0x1f0 [ 186.769166][ T2586] ? check_preemption_disabled+0x9e/0x330 [ 186.774860][ T2586] ? __rcu_read_lock+0x50/0x50 [ 186.779602][ T2586] ? __unwind_start+0x72f/0x8e0 [ 186.784435][ T2586] ? debug_smp_processor_id+0x20/0x20 [ 186.789787][ T2586] ? lo_release+0x1e0/0x1e0 [ 186.794269][ T2586] blkdev_ioctl+0x8f7/0x2ce0 [ 186.798844][ T2586] ? __kernel_text_address+0x93/0x100 [ 186.804193][ T2586] ? unwind_get_return_address+0x48/0x80 [ 186.809801][ T2586] ? __blkdev_driver_ioctl+0xd0/0xd0 [ 186.815069][ T2586] ? arch_stack_walk+0xf8/0x140 [ 186.819900][ T2586] ? __rcu_read_lock+0x50/0x50 [ 186.824644][ T2586] ? check_preemption_disabled+0x154/0x330 [ 186.830430][ T2586] ? avc_has_extended_perms+0x72a/0x1140 [ 186.836042][ T2586] ? avc_has_extended_perms+0xb5e/0x1140 [ 186.841654][ T2586] ? avc_ss_reset+0x3a0/0x3a0 [ 186.846308][ T2586] ? do_sys_open+0x62e/0x7c0 [ 186.850885][ T2586] block_ioctl+0xa8/0xe0 [ 186.855107][ T2586] ? blkdev_iopoll+0xf0/0xf0 [ 186.859674][ T2586] do_vfs_ioctl+0x76a/0x1720 [ 186.864243][ T2586] ? selinux_file_ioctl+0x72f/0x990 [ 186.869419][ T2586] ? ioctl_preallocate+0x250/0x250 [ 186.874510][ T2586] ? __fget+0x37b/0x3c0 [ 186.878646][ T2586] ? debug_smp_processor_id+0x20/0x20 [ 186.883997][ T2586] ? fget_many+0x20/0x20 [ 186.888222][ T2586] ? __fpregs_load_activate+0x1d7/0x3c0 [ 186.893745][ T2586] ? security_file_ioctl+0x9d/0xb0 [ 186.898860][ T2586] __x64_sys_ioctl+0xd4/0x110 [ 186.903514][ T2586] do_syscall_64+0xcb/0x1e0 [ 186.907995][ T2586] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 186.913876][ T2586] RIP: 0033:0x466217 [ 186.917754][ T2586] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 186.937339][ T2586] RSP: 002b:00007f71fc0d6f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.945728][ T2586] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000466217 [ 186.953687][ T2586] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 186.961636][ T2586] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 186.969689][ T2586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 186.977640][ T2586] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 187.009294][ T2586] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 187.019577][ T2599] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 187.035391][ T2586] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:12 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:12 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x1000000, 0x0, 0x0, 0x0) 02:54:12 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef01", 0x3b, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:12 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x0, 0x0, &(0x7f0000002500)={0x90, 0xfffffffffffffff5, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}}, 0x0, 0x0, &(0x7f0000002900)={0xa0, 0x0, 0xe3b4, {{0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfff, 0x0, 0x0, 0xc000}}, {0x0, 0x8}}}, 0x0}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000300)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275730f945caa95781470e24503702c776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530"]) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syncfs(r1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='pstore\x00', 0x0, 0x0) [ 187.061073][ T2588] overlayfs: workdir and upperdir must reside under the same mount 02:54:12 executing program 1 (fault-call:0 fault-nth:14): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:12 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f", 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 187.143837][ T2614] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 187.154852][ T2617] FAULT_INJECTION: forcing a failure. [ 187.154852][ T2617] name failslab, interval 1, probability 0, space 0, times 0 [ 187.168517][ T2617] CPU: 1 PID: 2617 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 187.178673][ T2617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.188720][ T2617] Call Trace: 02:54:12 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 187.190711][ T2615] overlayfs: conflicting lowerdir path [ 187.192005][ T2617] dump_stack+0x1d8/0x24e [ 187.192016][ T2617] ? devkmsg_release+0x11c/0x11c [ 187.192032][ T2617] ? mutex_unlock+0x19/0x40 [ 187.211186][ T2617] ? show_regs_print_info+0x12/0x12 [ 187.216457][ T2617] ? selinux_kernfs_init_security+0x1b2/0x7e0 [ 187.222505][ T2617] should_fail+0x6f6/0x860 [ 187.226919][ T2617] ? setup_fault_attr+0x3d0/0x3d0 [ 187.231938][ T2617] ? _raw_spin_lock+0xa3/0x1b0 [ 187.236688][ T2617] ? __kernfs_new_node+0xdb/0x6d0 [ 187.241695][ T2617] should_failslab+0x5/0x20 [ 187.246178][ T2617] kmem_cache_alloc+0x36/0x290 [ 187.250924][ T2617] __kernfs_new_node+0xdb/0x6d0 [ 187.255759][ T2617] ? mutex_lock+0xa6/0x110 [ 187.260163][ T2617] ? kernfs_new_node+0x160/0x160 [ 187.265084][ T2617] ? security_kernfs_init_security+0x9a/0xb0 [ 187.271044][ T2617] ? kernfs_activate+0x3fc/0x420 [ 187.275960][ T2617] kernfs_new_node+0x95/0x160 [ 187.280735][ T2617] __kernfs_create_file+0x45/0x260 [ 187.285827][ T2617] sysfs_add_file_mode_ns+0x293/0x340 [ 187.291180][ T2617] internal_create_group+0x560/0xf10 [ 187.296465][ T2617] ? rt_mutex_setprio+0xd10/0xd10 [ 187.301466][ T2617] ? try_to_wake_up+0xa69/0x12a0 [ 187.306380][ T2617] ? sysfs_create_group+0x20/0x20 [ 187.311382][ T2617] ? __loop_update_dio+0x23d/0x580 [ 187.316475][ T2617] loop_configure+0xdd7/0x1380 [ 187.321220][ T2617] lo_ioctl+0x820/0x23b0 [ 187.325440][ T2617] ? memset+0x1f/0x40 [ 187.329399][ T2617] ? unwind_next_frame+0x1f0a/0x27b0 [ 187.334675][ T2617] ? lo_release+0x1e0/0x1e0 [ 187.339167][ T2617] ? arch_stack_walk+0xde/0x140 [ 187.343996][ T2617] ? memset+0x1f/0x40 [ 187.347958][ T2617] ? unwind_next_frame+0x1f0a/0x27b0 [ 187.353225][ T2617] ? memset+0x1f/0x40 [ 187.357188][ T2617] ? unwind_next_frame+0x1f0a/0x27b0 [ 187.362449][ T2617] ? arch_stack_walk+0xde/0x140 [ 187.367276][ T2617] ? preempt_count_add+0x66/0x130 [ 187.372383][ T2617] ? unwind_next_frame+0x1f0a/0x27b0 [ 187.377761][ T2617] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 187.383816][ T2617] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 187.389779][ T2617] ? stack_trace_save+0x120/0x1f0 [ 187.394786][ T2617] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 187.400745][ T2617] ? __unwind_start+0x72f/0x8e0 [ 187.405673][ T2617] ? debug_smp_processor_id+0x20/0x20 [ 187.411023][ T2617] ? check_preemption_disabled+0x154/0x330 [ 187.416813][ T2617] ? debug_smp_processor_id+0x20/0x20 [ 187.422174][ T2617] ? check_preemption_disabled+0x9e/0x330 [ 187.427872][ T2617] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 187.434008][ T2617] ? rmqueue+0x49f/0x2370 [ 187.438329][ T2617] ? stack_trace_save+0x1f0/0x1f0 [ 187.443332][ T2617] ? check_preemption_disabled+0x9e/0x330 [ 187.449028][ T2617] ? __rcu_read_lock+0x50/0x50 [ 187.453769][ T2617] ? __unwind_start+0x72f/0x8e0 [ 187.458599][ T2617] ? debug_smp_processor_id+0x20/0x20 [ 187.463952][ T2617] ? is_bpf_text_address+0x280/0x2a0 [ 187.469213][ T2617] ? stack_trace_save+0x1f0/0x1f0 [ 187.474218][ T2617] ? __kernel_text_address+0x93/0x100 [ 187.479568][ T2617] ? unwind_get_return_address+0x48/0x80 [ 187.485179][ T2617] ? __rcu_read_lock+0x50/0x50 [ 187.489920][ T2617] ? arch_stack_walk+0xf8/0x140 [ 187.494756][ T2617] ? memset+0x1f/0x40 [ 187.498715][ T2617] ? unwind_next_frame+0x1f0a/0x27b0 [ 187.503980][ T2617] ? arch_stack_walk+0xde/0x140 [ 187.508832][ T2617] ? blkdev_get+0x390/0x390 [ 187.513333][ T2617] ? __rcu_read_lock+0x50/0x50 [ 187.518090][ T2617] ? _raw_spin_unlock+0x49/0x60 [ 187.522926][ T2617] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 187.528975][ T2617] ? mntput_no_expire+0x114/0xbd0 [ 187.533995][ T2617] ? stack_trace_save+0x1f0/0x1f0 [ 187.539000][ T2617] ? check_preemption_disabled+0x9e/0x330 [ 187.544698][ T2617] ? __rcu_read_lock+0x50/0x50 [ 187.549440][ T2617] ? __unwind_start+0x72f/0x8e0 [ 187.554267][ T2617] ? debug_smp_processor_id+0x20/0x20 [ 187.559619][ T2617] ? lo_release+0x1e0/0x1e0 [ 187.564101][ T2617] blkdev_ioctl+0x8f7/0x2ce0 [ 187.568675][ T2617] ? __kernel_text_address+0x93/0x100 [ 187.574022][ T2617] ? unwind_get_return_address+0x48/0x80 [ 187.579667][ T2617] ? __blkdev_driver_ioctl+0xd0/0xd0 [ 187.584930][ T2617] ? arch_stack_walk+0xf8/0x140 [ 187.589760][ T2617] ? __rcu_read_lock+0x50/0x50 [ 187.594520][ T2617] ? check_preemption_disabled+0x154/0x330 [ 187.600305][ T2617] ? avc_has_extended_perms+0x72a/0x1140 [ 187.605920][ T2617] ? avc_has_extended_perms+0xb5e/0x1140 [ 187.611535][ T2617] ? avc_ss_reset+0x3a0/0x3a0 [ 187.616193][ T2617] ? do_sys_open+0x62e/0x7c0 [ 187.620770][ T2617] block_ioctl+0xa8/0xe0 [ 187.624994][ T2617] ? blkdev_iopoll+0xf0/0xf0 [ 187.629567][ T2617] do_vfs_ioctl+0x76a/0x1720 [ 187.634138][ T2617] ? selinux_file_ioctl+0x72f/0x990 [ 187.639315][ T2617] ? ioctl_preallocate+0x250/0x250 [ 187.644410][ T2617] ? __fget+0x37b/0x3c0 [ 187.648546][ T2617] ? fget_many+0x20/0x20 [ 187.652770][ T2617] ? debug_smp_processor_id+0x20/0x20 [ 187.658120][ T2617] ? __x64_sys_pwrite64+0x1d9/0x240 [ 187.663299][ T2617] ? security_file_ioctl+0x9d/0xb0 [ 187.668404][ T2617] __x64_sys_ioctl+0xd4/0x110 [ 187.673129][ T2617] do_syscall_64+0xcb/0x1e0 [ 187.677623][ T2617] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 187.683498][ T2617] RIP: 0033:0x466217 [ 187.687379][ T2617] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 187.707050][ T2617] RSP: 002b:00007f71fc0d6f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.715441][ T2617] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000466217 [ 187.723389][ T2617] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 187.731339][ T2617] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff 02:54:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff", 0x38, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 187.739289][ T2617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 187.747241][ T2617] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 02:54:13 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:13 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x2000000, 0x0, 0x0, 0x0) [ 187.797176][ T2617] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 187.826612][ T2632] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 187.833421][ T2617] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:13 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/keycreate\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=@ipv4_newroute={0x1f8, 0x18, 0x100, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x34, 0x3, 0x0, 0x2, 0xff, 0x1, 0x2100}, [@RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_METRICS={0xf8, 0x8, 0x0, 0x1, "e8fc68c38ac5f037fc01f8f482169ae7dfeec500e19a11f766740546606466e7be0683cd88cc797d39560fbc2faea953aaa725a0a083e467ddd30078a2ff6fe283653ed9d531cad3246b87d6b45b2a0f7e595df9ca1770d663e7b42ca1654f1e6922f52e9e9d789d551b91835a852a4b066cd8b1ea4aca63203c7a14b6440b12c4eabce8960d01af40334694c35f1c868d75ecaba8e053be258c50cd2babdda174d601abe1da90551dd88122f0a2c42395d97a7cf40879b0da4bf78475331d1d3c44f893a3e256d288b55eafe0d74514d26fd0a79edb5069e29881f81551ca94bc8c4339ff87739044e5194562d08e8369448403"}, @RTA_METRICS={0xaa, 0x8, 0x0, 0x1, "7095b5cf3f5a4ba58893f2f144554cd5dbe1e2f69759533286da85410b23f17a6a01cfa1b813d84dfa7cd20353a8a1b30bcc1bfde4b6afe3478a0d8f8038d99137d38ced34d0cb31522cff97fb1d3a43cd07c6f586ad7d8a466334f036cbcc69e28aed16f02355218f61bce41bbee062c721646d37cee6e91b63f238b3ee554403f88c33278e91a91af306b75a801ad6deb078c07f4c435f13cf25d9f01aaafa83e436ca8e85"}, @RTA_SRC={0x8, 0x2, @loopback}, @RTA_UID={0x8, 0x19, r1}, @RTA_OIF={0x8}, @RTA_FLOW={0x8, 0xb, 0xfffffdc7}, @RTA_MARK={0x8, 0x10, 0x7f}]}, 0x1f8}}, 0x2000004) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000580)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4001}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r2, &(0x7f0000008280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x8}}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r2, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:54:13 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff", 0x38, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:13 executing program 1 (fault-call:0 fault-nth:15): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fork() ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x4}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000004c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x1, 0xfffffffe}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e25, 0x5, @empty, 0x8000}, 0x1c) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 02:54:13 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x4000000, 0x0, 0x0, 0x0) [ 187.968674][ T2640] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 187.993454][ T2640] File: /root/syzkaller-testdir903516288/syzkaller.75JZd2/75/bus PID: 2640 Comm: syz-executor.0 02:54:13 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 188.062447][ T2652] FAULT_INJECTION: forcing a failure. [ 188.062447][ T2652] name failslab, interval 1, probability 0, space 0, times 0 [ 188.075503][ T2652] CPU: 1 PID: 2652 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 188.085700][ T2652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.095889][ T2652] Call Trace: [ 188.099160][ T2652] dump_stack+0x1d8/0x24e [ 188.103462][ T2652] ? devkmsg_release+0x11c/0x11c [ 188.108371][ T2652] ? mutex_unlock+0x19/0x40 [ 188.112845][ T2652] ? show_regs_print_info+0x12/0x12 [ 188.118015][ T2652] ? selinux_kernfs_init_security+0x1b2/0x7e0 [ 188.124052][ T2652] should_fail+0x6f6/0x860 [ 188.128453][ T2652] ? setup_fault_attr+0x3d0/0x3d0 [ 188.133465][ T2652] ? _raw_spin_lock+0xa3/0x1b0 [ 188.138203][ T2652] ? __kernfs_new_node+0xdb/0x6d0 [ 188.143205][ T2652] should_failslab+0x5/0x20 [ 188.147702][ T2652] kmem_cache_alloc+0x36/0x290 [ 188.152450][ T2652] __kernfs_new_node+0xdb/0x6d0 [ 188.157274][ T2652] ? mutex_lock+0xa6/0x110 [ 188.161662][ T2652] ? kernfs_new_node+0x160/0x160 [ 188.166570][ T2652] ? security_kernfs_init_security+0x9a/0xb0 [ 188.172519][ T2652] ? kernfs_activate+0x3fc/0x420 [ 188.177445][ T2652] kernfs_new_node+0x95/0x160 [ 188.182098][ T2652] __kernfs_create_file+0x45/0x260 [ 188.187180][ T2652] sysfs_add_file_mode_ns+0x293/0x340 [ 188.192523][ T2652] internal_create_group+0x560/0xf10 [ 188.197789][ T2652] ? rt_mutex_setprio+0xd10/0xd10 [ 188.202813][ T2652] ? try_to_wake_up+0xa69/0x12a0 [ 188.207732][ T2652] ? sysfs_create_group+0x20/0x20 [ 188.212734][ T2652] ? __loop_update_dio+0x23d/0x580 [ 188.217817][ T2652] loop_configure+0xdd7/0x1380 [ 188.222554][ T2652] lo_ioctl+0x820/0x23b0 [ 188.226768][ T2652] ? memset+0x1f/0x40 [ 188.230719][ T2652] ? unwind_next_frame+0x1f0a/0x27b0 [ 188.235984][ T2652] ? lo_release+0x1e0/0x1e0 [ 188.240483][ T2652] ? arch_stack_walk+0xde/0x140 [ 188.245306][ T2652] ? memset+0x1f/0x40 [ 188.249259][ T2652] ? unwind_next_frame+0x1f0a/0x27b0 [ 188.254514][ T2652] ? memset+0x1f/0x40 [ 188.258466][ T2652] ? unwind_next_frame+0x1f0a/0x27b0 [ 188.263721][ T2652] ? arch_stack_walk+0xde/0x140 [ 188.268544][ T2652] ? preempt_count_add+0x66/0x130 [ 188.273536][ T2652] ? unwind_next_frame+0x1f0a/0x27b0 [ 188.278822][ T2652] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 188.283630][ T2664] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 188.284880][ T2652] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 188.298893][ T2652] ? stack_trace_save+0x120/0x1f0 [ 188.303909][ T2652] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 188.309871][ T2652] ? __unwind_start+0x72f/0x8e0 [ 188.314713][ T2652] ? debug_smp_processor_id+0x20/0x20 [ 188.320067][ T2652] ? check_preemption_disabled+0x154/0x330 [ 188.325851][ T2652] ? debug_smp_processor_id+0x20/0x20 [ 188.331193][ T2652] ? check_preemption_disabled+0x9e/0x330 [ 188.336897][ T2652] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 188.342936][ T2652] ? rmqueue+0x49f/0x2370 [ 188.347259][ T2652] ? stack_trace_save+0x1f0/0x1f0 [ 188.352254][ T2652] ? check_preemption_disabled+0x9e/0x330 [ 188.357944][ T2652] ? __rcu_read_lock+0x50/0x50 [ 188.362686][ T2652] ? __unwind_start+0x72f/0x8e0 [ 188.367514][ T2652] ? debug_smp_processor_id+0x20/0x20 [ 188.372869][ T2652] ? is_bpf_text_address+0x280/0x2a0 [ 188.378123][ T2652] ? stack_trace_save+0x1f0/0x1f0 [ 188.383125][ T2652] ? __kernel_text_address+0x93/0x100 [ 188.388475][ T2652] ? unwind_get_return_address+0x48/0x80 [ 188.394076][ T2652] ? __rcu_read_lock+0x50/0x50 [ 188.398810][ T2652] ? arch_stack_walk+0xf8/0x140 [ 188.403634][ T2652] ? memset+0x1f/0x40 [ 188.407594][ T2652] ? unwind_next_frame+0x1f0a/0x27b0 [ 188.412868][ T2652] ? arch_stack_walk+0xde/0x140 [ 188.417702][ T2652] ? blkdev_get+0x390/0x390 [ 188.422181][ T2652] ? __rcu_read_lock+0x50/0x50 [ 188.426921][ T2652] ? _raw_spin_unlock+0x49/0x60 [ 188.431840][ T2652] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 188.437883][ T2652] ? mntput_no_expire+0x114/0xbd0 [ 188.442881][ T2652] ? stack_trace_save+0x1f0/0x1f0 [ 188.447880][ T2652] ? check_preemption_disabled+0x9e/0x330 [ 188.453579][ T2652] ? __rcu_read_lock+0x50/0x50 [ 188.458323][ T2652] ? __unwind_start+0x72f/0x8e0 [ 188.463147][ T2652] ? debug_smp_processor_id+0x20/0x20 [ 188.468512][ T2652] ? lo_release+0x1e0/0x1e0 [ 188.472987][ T2652] blkdev_ioctl+0x8f7/0x2ce0 [ 188.477557][ T2652] ? __kernel_text_address+0x93/0x100 [ 188.482909][ T2652] ? unwind_get_return_address+0x48/0x80 [ 188.488512][ T2652] ? __blkdev_driver_ioctl+0xd0/0xd0 [ 188.493884][ T2652] ? arch_stack_walk+0xf8/0x140 [ 188.498707][ T2652] ? __rcu_read_lock+0x50/0x50 [ 188.503441][ T2652] ? check_preemption_disabled+0x154/0x330 [ 188.509232][ T2652] ? avc_has_extended_perms+0x72a/0x1140 [ 188.514846][ T2652] ? avc_has_extended_perms+0xb5e/0x1140 [ 188.520461][ T2652] ? avc_ss_reset+0x3a0/0x3a0 [ 188.525119][ T2652] ? do_sys_open+0x62e/0x7c0 [ 188.529687][ T2652] block_ioctl+0xa8/0xe0 [ 188.533926][ T2652] ? blkdev_iopoll+0xf0/0xf0 [ 188.538488][ T2652] do_vfs_ioctl+0x76a/0x1720 [ 188.543052][ T2652] ? selinux_file_ioctl+0x72f/0x990 [ 188.548221][ T2652] ? ioctl_preallocate+0x250/0x250 [ 188.553307][ T2652] ? __fget+0x37b/0x3c0 [ 188.557434][ T2652] ? fget_many+0x20/0x20 [ 188.561675][ T2652] ? debug_smp_processor_id+0x20/0x20 [ 188.567018][ T2652] ? __x64_sys_pwrite64+0x1d9/0x240 [ 188.572233][ T2652] ? security_file_ioctl+0x9d/0xb0 [ 188.577333][ T2652] __x64_sys_ioctl+0xd4/0x110 [ 188.581980][ T2652] do_syscall_64+0xcb/0x1e0 [ 188.586474][ T2652] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 188.592341][ T2652] RIP: 0033:0x466217 [ 188.596214][ T2652] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 188.615901][ T2652] RSP: 002b:00007f71fc0d6f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.624284][ T2652] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000466217 [ 188.632231][ T2652] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 188.640183][ T2652] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 188.648133][ T2652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 188.656087][ T2652] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 02:54:14 executing program 0: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x29) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'veth1_to_team\x00', {0x2, 0x0, @private}}) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r0, 0x1) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[], 0xfffffca4) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000080)) ftruncate(r1, 0x7) open(&(0x7f0000000000)='./bus\x00', 0x181000, 0x2) fallocate(r0, 0x0, 0x0, 0x80019c) 02:54:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff", 0x38, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:14 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x7000000, 0x0, 0x0, 0x0) [ 188.670149][ T2650] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 188.687611][ T2652] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. 02:54:14 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:14 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:14 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 188.739711][ T2673] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 188.763613][ T2652] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 188.912284][ T2689] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:16 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/keycreate\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=@ipv4_newroute={0x1f8, 0x18, 0x100, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x34, 0x3, 0x0, 0x2, 0xff, 0x1, 0x2100}, [@RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_METRICS={0xf8, 0x8, 0x0, 0x1, "e8fc68c38ac5f037fc01f8f482169ae7dfeec500e19a11f766740546606466e7be0683cd88cc797d39560fbc2faea953aaa725a0a083e467ddd30078a2ff6fe283653ed9d531cad3246b87d6b45b2a0f7e595df9ca1770d663e7b42ca1654f1e6922f52e9e9d789d551b91835a852a4b066cd8b1ea4aca63203c7a14b6440b12c4eabce8960d01af40334694c35f1c868d75ecaba8e053be258c50cd2babdda174d601abe1da90551dd88122f0a2c42395d97a7cf40879b0da4bf78475331d1d3c44f893a3e256d288b55eafe0d74514d26fd0a79edb5069e29881f81551ca94bc8c4339ff87739044e5194562d08e8369448403"}, @RTA_METRICS={0xaa, 0x8, 0x0, 0x1, "7095b5cf3f5a4ba58893f2f144554cd5dbe1e2f69759533286da85410b23f17a6a01cfa1b813d84dfa7cd20353a8a1b30bcc1bfde4b6afe3478a0d8f8038d99137d38ced34d0cb31522cff97fb1d3a43cd07c6f586ad7d8a466334f036cbcc69e28aed16f02355218f61bce41bbee062c721646d37cee6e91b63f238b3ee554403f88c33278e91a91af306b75a801ad6deb078c07f4c435f13cf25d9f01aaafa83e436ca8e85"}, @RTA_SRC={0x8, 0x2, @loopback}, @RTA_UID={0x8, 0x19, r1}, @RTA_OIF={0x8}, @RTA_FLOW={0x8, 0xb, 0xfffffdc7}, @RTA_MARK={0x8, 0x10, 0x7f}]}, 0x1f8}}, 0x2000004) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000580)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4001}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r2, &(0x7f0000008280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x8}}, 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r2, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:54:16 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x10000000, 0x0, 0x0, 0x0) 02:54:16 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:16 executing program 1 (fault-call:0 fault-nth:16): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53", 0x39, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:16 executing program 0: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000089000000000000000000009500000000000000114425afca62a4e4ee52d0"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000340)={&(0x7f0000000140), 0xc, 0x0}, 0x927508d867c88d4b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) open(0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x164) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000780)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x3a, 0x80, &(0x7f0000000480)=""/128, 0x41000, 0x3, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x1ff, 0xd7600}, 0x10, 0x11059, r0}, 0x78) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) r4 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000002c0)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23, @empty}, 0xfffffffffffffd16) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) r5 = syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESOCT=r5, @ANYRES16=r5, @ANYRES64, @ANYRESDEC], 0x100000530) [ 190.614664][ T2704] FAULT_INJECTION: forcing a failure. [ 190.614664][ T2704] name failslab, interval 1, probability 0, space 0, times 0 [ 190.627398][ T2704] CPU: 1 PID: 2704 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 190.637537][ T2704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.647670][ T2704] Call Trace: [ 190.650954][ T2704] dump_stack+0x1d8/0x24e [ 190.655268][ T2704] ? devkmsg_release+0x11c/0x11c [ 190.660185][ T2704] ? mutex_unlock+0x19/0x40 [ 190.664793][ T2704] ? show_regs_print_info+0x12/0x12 [ 190.669981][ T2704] ? selinux_kernfs_init_security+0x1b2/0x7e0 [ 190.676044][ T2704] should_fail+0x6f6/0x860 [ 190.680446][ T2704] ? setup_fault_attr+0x3d0/0x3d0 [ 190.685454][ T2704] ? _raw_spin_lock+0xa3/0x1b0 [ 190.690201][ T2704] ? __kernfs_new_node+0xdb/0x6d0 [ 190.695213][ T2704] should_failslab+0x5/0x20 [ 190.699700][ T2704] kmem_cache_alloc+0x36/0x290 [ 190.704448][ T2704] __kernfs_new_node+0xdb/0x6d0 [ 190.709281][ T2704] ? mutex_lock+0xa6/0x110 [ 190.713678][ T2704] ? kernfs_new_node+0x160/0x160 [ 190.718596][ T2704] ? security_kernfs_init_security+0x9a/0xb0 [ 190.724558][ T2704] ? kernfs_activate+0x3fc/0x420 [ 190.729477][ T2704] kernfs_new_node+0x95/0x160 [ 190.734135][ T2704] __kernfs_create_file+0x45/0x260 [ 190.739226][ T2704] sysfs_add_file_mode_ns+0x293/0x340 [ 190.744584][ T2704] internal_create_group+0x560/0xf10 [ 190.749851][ T2704] ? rt_mutex_setprio+0xd10/0xd10 [ 190.754856][ T2704] ? try_to_wake_up+0xa69/0x12a0 [ 190.759773][ T2704] ? sysfs_create_group+0x20/0x20 [ 190.764780][ T2704] ? __loop_update_dio+0x23d/0x580 [ 190.769876][ T2704] loop_configure+0xdd7/0x1380 [ 190.774624][ T2704] lo_ioctl+0x820/0x23b0 [ 190.778844][ T2704] ? memset+0x1f/0x40 [ 190.782812][ T2704] ? unwind_next_frame+0x1f0a/0x27b0 [ 190.788095][ T2704] ? lo_release+0x1e0/0x1e0 [ 190.792576][ T2704] ? arch_stack_walk+0xde/0x140 [ 190.797404][ T2704] ? memset+0x1f/0x40 [ 190.801366][ T2704] ? unwind_next_frame+0x1f0a/0x27b0 [ 190.806631][ T2704] ? memset+0x1f/0x40 [ 190.810593][ T2704] ? unwind_next_frame+0x1f0a/0x27b0 [ 190.815859][ T2704] ? arch_stack_walk+0xde/0x140 [ 190.820693][ T2704] ? preempt_count_add+0x66/0x130 [ 190.825693][ T2704] ? unwind_next_frame+0x1f0a/0x27b0 [ 190.830960][ T2704] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 190.837006][ T2704] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 190.842962][ T2704] ? stack_trace_save+0x120/0x1f0 [ 190.847992][ T2704] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 190.853946][ T2704] ? __unwind_start+0x72f/0x8e0 [ 190.858777][ T2704] ? debug_smp_processor_id+0x20/0x20 [ 190.864132][ T2704] ? check_preemption_disabled+0x154/0x330 [ 190.869915][ T2704] ? debug_smp_processor_id+0x20/0x20 [ 190.875723][ T2704] ? check_preemption_disabled+0x9e/0x330 [ 190.881423][ T2704] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 190.887470][ T2704] ? rmqueue+0x49f/0x2370 [ 190.891781][ T2704] ? stack_trace_save+0x1f0/0x1f0 [ 190.896783][ T2704] ? check_preemption_disabled+0x9e/0x330 [ 190.902481][ T2704] ? __rcu_read_lock+0x50/0x50 [ 190.907221][ T2704] ? __unwind_start+0x72f/0x8e0 [ 190.912049][ T2704] ? debug_smp_processor_id+0x20/0x20 [ 190.917404][ T2704] ? is_bpf_text_address+0x280/0x2a0 [ 190.922667][ T2704] ? stack_trace_save+0x1f0/0x1f0 [ 190.927670][ T2704] ? __kernel_text_address+0x93/0x100 [ 190.933020][ T2704] ? unwind_get_return_address+0x48/0x80 [ 190.938631][ T2704] ? __rcu_read_lock+0x50/0x50 [ 190.943369][ T2704] ? arch_stack_walk+0xf8/0x140 [ 190.948298][ T2704] ? memset+0x1f/0x40 [ 190.952261][ T2704] ? unwind_next_frame+0x1f0a/0x27b0 [ 190.957525][ T2704] ? arch_stack_walk+0xde/0x140 [ 190.962364][ T2704] ? blkdev_get+0x390/0x390 [ 190.966845][ T2704] ? __rcu_read_lock+0x50/0x50 [ 190.971588][ T2704] ? _raw_spin_unlock+0x49/0x60 [ 190.976415][ T2704] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 190.982458][ T2704] ? mntput_no_expire+0x114/0xbd0 [ 190.987470][ T2704] ? stack_trace_save+0x1f0/0x1f0 [ 190.992473][ T2704] ? check_preemption_disabled+0x9e/0x330 [ 190.998172][ T2704] ? __rcu_read_lock+0x50/0x50 [ 191.002916][ T2704] ? __unwind_start+0x72f/0x8e0 [ 191.007749][ T2704] ? debug_smp_processor_id+0x20/0x20 [ 191.013097][ T2704] ? lo_release+0x1e0/0x1e0 [ 191.017580][ T2704] blkdev_ioctl+0x8f7/0x2ce0 [ 191.022152][ T2704] ? __kernel_text_address+0x93/0x100 [ 191.027523][ T2704] ? unwind_get_return_address+0x48/0x80 [ 191.033136][ T2704] ? __blkdev_driver_ioctl+0xd0/0xd0 [ 191.038420][ T2704] ? arch_stack_walk+0xf8/0x140 [ 191.043255][ T2704] ? __rcu_read_lock+0x50/0x50 [ 191.048000][ T2704] ? check_preemption_disabled+0x154/0x330 [ 191.053788][ T2704] ? avc_has_extended_perms+0x72a/0x1140 [ 191.059400][ T2704] ? avc_has_extended_perms+0xb5e/0x1140 [ 191.065011][ T2704] ? avc_ss_reset+0x3a0/0x3a0 [ 191.069669][ T2704] ? do_sys_open+0x62e/0x7c0 [ 191.074247][ T2704] block_ioctl+0xa8/0xe0 [ 191.078467][ T2704] ? blkdev_iopoll+0xf0/0xf0 [ 191.083035][ T2704] do_vfs_ioctl+0x76a/0x1720 [ 191.087604][ T2704] ? selinux_file_ioctl+0x72f/0x990 [ 191.092781][ T2704] ? ioctl_preallocate+0x250/0x250 [ 191.097961][ T2704] ? __fget+0x37b/0x3c0 [ 191.102204][ T2704] ? fget_many+0x20/0x20 [ 191.106427][ T2704] ? debug_smp_processor_id+0x20/0x20 [ 191.111776][ T2704] ? __x64_sys_pwrite64+0x1d9/0x240 [ 191.116952][ T2704] ? security_file_ioctl+0x9d/0xb0 [ 191.122043][ T2704] __x64_sys_ioctl+0xd4/0x110 [ 191.126699][ T2704] do_syscall_64+0xcb/0x1e0 [ 191.131192][ T2704] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 191.137080][ T2704] RIP: 0033:0x466217 [ 191.140954][ T2704] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:54:16 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 191.160534][ T2704] RSP: 002b:00007f71fc0d6f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.168921][ T2704] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000466217 [ 191.176870][ T2704] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 191.184821][ T2704] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 191.192771][ T2704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 191.200817][ T2704] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 02:54:16 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x40000000, 0x0, 0x0, 0x0) 02:54:17 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:17 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xc}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000500)='./bus/file0\x00') mount(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x10010, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mount$overlay(0x0, 0x0, &(0x7f0000000400)='overlay\x00', 0x220000, &(0x7f0000000480)={[{@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}, {@nfs_export_on='nfs_export=on'}, {@index_on='index=on'}, {@metacopy_off='metacopy=off'}, {@xino_on='xino=on'}, {@redirect_dir={'redirect_dir', 0x3d, './bus'}}], [{@dont_hash='dont_hash'}]}) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) socket$packet(0x11, 0x2, 0x300) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fchown(r0, 0x0, r1) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x6020, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3ff}}, {@blksize={'blksize'}}, {@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@uid_gt={'uid>'}}, {@audit='audit'}]}}) chdir(&(0x7f0000000000)='./bus/file0\x00') mount$tmpfs(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='tmpfs\x00', 0x40001, &(0x7f0000000b00)={[{@gid={'gid', 0x3d, r1}}, {@huge_always='huge=always'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'index=on'}}, {@dont_hash='dont_hash'}, {@context={'context', 0x3d, 'staff_u'}}, {@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '('}}, {@dont_measure='dont_measure'}, {@seclabel='seclabel'}]}) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 02:54:17 executing program 1 (fault-call:0 fault-nth:17): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:17 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 191.244243][ T2710] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 191.256089][ T2704] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 191.269542][ T2704] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 191.333506][ T2729] FAULT_INJECTION: forcing a failure. [ 191.333506][ T2729] name failslab, interval 1, probability 0, space 0, times 0 [ 191.351162][ T2729] CPU: 1 PID: 2729 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 191.361312][ T2729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.371341][ T2729] Call Trace: [ 191.374610][ T2729] dump_stack+0x1d8/0x24e [ 191.378917][ T2729] ? devkmsg_release+0x11c/0x11c [ 191.383828][ T2729] ? mutex_unlock+0x19/0x40 [ 191.388309][ T2729] ? show_regs_print_info+0x12/0x12 [ 191.393482][ T2729] ? selinux_kernfs_init_security+0x1b2/0x7e0 [ 191.399521][ T2729] should_fail+0x6f6/0x860 [ 191.403910][ T2729] ? setup_fault_attr+0x3d0/0x3d0 [ 191.408906][ T2729] ? _raw_spin_lock+0xa3/0x1b0 [ 191.414085][ T2729] ? __kernfs_new_node+0xdb/0x6d0 [ 191.419097][ T2729] should_failslab+0x5/0x20 [ 191.423580][ T2729] kmem_cache_alloc+0x36/0x290 [ 191.428323][ T2729] __kernfs_new_node+0xdb/0x6d0 02:54:17 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x1) lseek(r1, 0x1200, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8400fffffffa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0xc, 0x111, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x4, 0x5}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x73}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x4) fallocate(r1, 0x3, 0x0, 0x10000101) 02:54:17 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0xeffdffff, 0x0, 0x0, 0x0) 02:54:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53", 0x39, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:17 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 191.433163][ T2729] ? mutex_lock+0xa6/0x110 [ 191.437568][ T2729] ? kernfs_new_node+0x160/0x160 [ 191.442484][ T2729] ? security_kernfs_init_security+0x9a/0xb0 [ 191.448443][ T2729] ? kernfs_activate+0x3fc/0x420 [ 191.453364][ T2729] kernfs_new_node+0x95/0x160 [ 191.458034][ T2729] __kernfs_create_file+0x45/0x260 [ 191.463130][ T2729] sysfs_add_file_mode_ns+0x293/0x340 [ 191.468491][ T2729] internal_create_group+0x560/0xf10 [ 191.473748][ T2729] ? rt_mutex_setprio+0xd10/0xd10 [ 191.478767][ T2729] ? try_to_wake_up+0xa69/0x12a0 [ 191.483678][ T2729] ? sysfs_create_group+0x20/0x20 [ 191.488686][ T2729] ? __loop_update_dio+0x23d/0x580 [ 191.493777][ T2729] loop_configure+0xdd7/0x1380 [ 191.498521][ T2729] lo_ioctl+0x820/0x23b0 [ 191.502750][ T2729] ? lo_release+0x1e0/0x1e0 [ 191.507369][ T2729] ? arch_stack_walk+0xde/0x140 [ 191.512196][ T2729] ? update_blocked_averages+0x780/0x780 [ 191.517891][ T2729] ? kvm_sched_clock_read+0x15/0x40 [ 191.523064][ T2729] ? sched_clock+0x36/0x40 [ 191.527458][ T2729] ? sched_clock_cpu+0x18/0x390 [ 191.532289][ T2729] ? check_preemption_disabled+0x9e/0x330 [ 191.537980][ T2729] ? debug_smp_processor_id+0x20/0x20 [ 191.543329][ T2729] ? check_preemption_disabled+0x9e/0x330 [ 191.549020][ T2729] ? _raw_spin_trylock_bh+0x1a0/0x1a0 [ 191.554370][ T2729] ? debug_smp_processor_id+0x20/0x20 [ 191.559725][ T2729] ? __perf_event_task_sched_out+0x1092/0x11b0 [ 191.565912][ T2729] ? __perf_event_task_sched_in+0x57c/0x5e0 [ 191.571776][ T2729] ? perf_pmu_sched_task+0x430/0x430 [ 191.577086][ T2729] ? debug_smp_processor_id+0x20/0x20 [ 191.582439][ T2729] ? __rcu_read_lock+0x50/0x50 [ 191.587174][ T2729] ? dequeue_entity+0x892/0xdf0 [ 191.591996][ T2729] ? _raw_spin_unlock_irq+0x4a/0x60 [ 191.597170][ T2729] ? finish_task_switch+0x130/0x550 [ 191.602348][ T2729] ? prepare_task_switch+0x4ac/0x580 [ 191.607605][ T2729] ? __schedule+0x9b8/0x1170 [ 191.612254][ T2729] ? __rcu_read_lock+0x50/0x50 [ 191.617006][ T2729] ? _raw_spin_lock+0xa3/0x1b0 [ 191.621739][ T2729] ? _raw_spin_trylock_bh+0x1a0/0x1a0 [ 191.627080][ T2729] ? stack_trace_save+0x1f0/0x1f0 [ 191.632079][ T2729] ? schedule+0x152/0x1d0 [ 191.636402][ T2729] ? __mutex_lock+0xa9b/0xf90 [ 191.641149][ T2729] ? memset+0x1f/0x40 [ 191.645136][ T2729] ? unwind_next_frame+0x1f0a/0x27b0 [ 191.650410][ T2729] ? arch_stack_walk+0xde/0x140 [ 191.655271][ T2729] ? _raw_spin_trylock_bh+0x1a0/0x1a0 [ 191.660616][ T2729] ? blkdev_get+0x390/0x390 [ 191.665111][ T2729] ? __rcu_read_lock+0x50/0x50 [ 191.669861][ T2729] ? _raw_spin_unlock+0x49/0x60 [ 191.674680][ T2729] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 191.680715][ T2729] ? mntput_no_expire+0x114/0xbd0 [ 191.685717][ T2729] ? stack_trace_save+0x1f0/0x1f0 [ 191.690771][ T2729] ? check_preemption_disabled+0x9e/0x330 [ 191.696464][ T2729] ? __rcu_read_lock+0x50/0x50 [ 191.701218][ T2729] ? __unwind_start+0x72f/0x8e0 [ 191.706048][ T2729] ? debug_smp_processor_id+0x20/0x20 [ 191.711415][ T2729] ? lo_release+0x1e0/0x1e0 [ 191.715893][ T2729] blkdev_ioctl+0x8f7/0x2ce0 [ 191.720472][ T2729] ? __kernel_text_address+0x93/0x100 [ 191.725812][ T2729] ? unwind_get_return_address+0x48/0x80 [ 191.731416][ T2729] ? __blkdev_driver_ioctl+0xd0/0xd0 [ 191.736756][ T2729] ? arch_stack_walk+0xf8/0x140 [ 191.741575][ T2729] ? __rcu_read_lock+0x50/0x50 [ 191.746308][ T2729] ? check_preemption_disabled+0x154/0x330 [ 191.752086][ T2729] ? avc_has_extended_perms+0x72a/0x1140 [ 191.757687][ T2729] ? avc_has_extended_perms+0xb5e/0x1140 [ 191.763291][ T2729] ? avc_ss_reset+0x3a0/0x3a0 [ 191.767944][ T2729] ? do_sys_open+0x62e/0x7c0 [ 191.772537][ T2729] block_ioctl+0xa8/0xe0 [ 191.776752][ T2729] ? blkdev_iopoll+0xf0/0xf0 [ 191.781312][ T2729] do_vfs_ioctl+0x76a/0x1720 [ 191.785873][ T2729] ? selinux_file_ioctl+0x72f/0x990 [ 191.791042][ T2729] ? ioctl_preallocate+0x250/0x250 [ 191.796128][ T2729] ? __fget+0x37b/0x3c0 [ 191.800284][ T2729] ? debug_smp_processor_id+0x20/0x20 [ 191.805630][ T2729] ? fget_many+0x20/0x20 [ 191.809844][ T2729] ? __fpregs_load_activate+0x1d7/0x3c0 [ 191.815360][ T2729] ? security_file_ioctl+0x9d/0xb0 [ 191.820443][ T2729] __x64_sys_ioctl+0xd4/0x110 [ 191.825090][ T2729] do_syscall_64+0xcb/0x1e0 [ 191.829586][ T2729] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 191.835449][ T2729] RIP: 0033:0x466217 [ 191.839315][ T2729] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 191.858888][ T2729] RSP: 002b:00007f71fc0d6f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.867266][ T2729] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000466217 [ 191.875210][ T2729] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 191.883155][ T2729] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 191.891097][ T2729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 191.899064][ T2729] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 191.923490][ T2728] overlayfs: maximum fs stacking depth exceeded 02:54:17 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 191.933455][ T2729] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 191.947746][ T2740] overlayfs: filesystem on './bus' not supported as upperdir [ 191.950482][ T2742] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 191.977109][ T2729] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:17 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:vmware_device_t:s0\x00', 0x25) r1 = socket(0x1e, 0x1, 0x0) listen(r1, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffe00}], 0x1, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sched_setattr(r2, &(0x7f0000000080)={0x38, 0x1, 0x4, 0x5, 0x101, 0xffffffff, 0x10001, 0x8, 0x81, 0x7fffffff}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x2}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x2000000) 02:54:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53", 0x39, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 191.988160][ T2736] devtmpfs: Unknown parameter 'fd' 02:54:17 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0xf5ffffff, 0x0, 0x0, 0x0) 02:54:17 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x119, 0x119, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef]}}, 0x0, 0x136}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 192.042553][ T2751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.051292][ T22] audit: type=1400 audit(1617418457.780:10): avc: denied { create } for pid=2752 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:vmware_device_t:s0 tclass=socket permissive=1 [ 192.094251][ T22] audit: type=1400 audit(1617418457.810:11): avc: denied { listen } for pid=2752 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:vmware_device_t:s0 tclass=socket permissive=1 02:54:17 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x119, 0x119, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef]}}, 0x0, 0x136}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:17 executing program 1 (fault-call:0 fault-nth:18): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:17 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 192.153413][ T2754] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 192.234050][ T2770] FAULT_INJECTION: forcing a failure. [ 192.234050][ T2770] name failslab, interval 1, probability 0, space 0, times 0 [ 192.259781][ T2770] CPU: 1 PID: 2770 Comm: syz-executor.1 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 192.269960][ T2770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.280009][ T2770] Call Trace: [ 192.283297][ T2770] dump_stack+0x1d8/0x24e [ 192.287620][ T2770] ? devkmsg_release+0x11c/0x11c [ 192.292549][ T2770] ? mutex_unlock+0x19/0x40 [ 192.297044][ T2770] ? show_regs_print_info+0x12/0x12 [ 192.302231][ T2770] ? selinux_kernfs_init_security+0x1b2/0x7e0 [ 192.308311][ T2770] should_fail+0x6f6/0x860 [ 192.312723][ T2770] ? setup_fault_attr+0x3d0/0x3d0 [ 192.317737][ T2770] ? _raw_spin_lock+0xa3/0x1b0 [ 192.322490][ T2770] ? __kernfs_new_node+0xdb/0x6d0 [ 192.327505][ T2770] should_failslab+0x5/0x20 [ 192.331999][ T2770] kmem_cache_alloc+0x36/0x290 [ 192.336750][ T2770] __kernfs_new_node+0xdb/0x6d0 [ 192.341591][ T2770] ? mutex_lock+0xa6/0x110 [ 192.345993][ T2770] ? kernfs_new_node+0x160/0x160 [ 192.350917][ T2770] ? security_kernfs_init_security+0x9a/0xb0 [ 192.356885][ T2770] ? kernfs_activate+0x3fc/0x420 [ 192.361812][ T2770] kernfs_new_node+0x95/0x160 [ 192.366478][ T2770] __kernfs_create_file+0x45/0x260 [ 192.371580][ T2770] sysfs_add_file_mode_ns+0x293/0x340 [ 192.376941][ T2770] internal_create_group+0x560/0xf10 [ 192.382221][ T2770] ? rt_mutex_setprio+0xd10/0xd10 [ 192.387237][ T2770] ? try_to_wake_up+0xa69/0x12a0 [ 192.392163][ T2770] ? sysfs_create_group+0x20/0x20 [ 192.397297][ T2770] ? __loop_update_dio+0x23d/0x580 [ 192.402398][ T2770] loop_configure+0xdd7/0x1380 [ 192.407188][ T2770] lo_ioctl+0x820/0x23b0 [ 192.411423][ T2770] ? memset+0x1f/0x40 [ 192.415393][ T2770] ? unwind_next_frame+0x1f0a/0x27b0 [ 192.420665][ T2770] ? lo_release+0x1e0/0x1e0 [ 192.425159][ T2770] ? arch_stack_walk+0xde/0x140 [ 192.429998][ T2770] ? memset+0x1f/0x40 [ 192.433969][ T2770] ? unwind_next_frame+0x1f0a/0x27b0 [ 192.439243][ T2770] ? memset+0x1f/0x40 [ 192.443217][ T2770] ? unwind_next_frame+0x1f0a/0x27b0 [ 192.448497][ T2770] ? arch_stack_walk+0xde/0x140 [ 192.453344][ T2770] ? preempt_count_add+0x66/0x130 [ 192.458355][ T2770] ? unwind_next_frame+0x1f0a/0x27b0 [ 192.463633][ T2770] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 192.469691][ T2770] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 192.475665][ T2770] ? stack_trace_save+0x120/0x1f0 [ 192.480680][ T2770] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 192.486678][ T2770] ? __unwind_start+0x72f/0x8e0 [ 192.491519][ T2770] ? debug_smp_processor_id+0x20/0x20 [ 192.496884][ T2770] ? check_preemption_disabled+0x154/0x330 [ 192.502807][ T2770] ? debug_smp_processor_id+0x20/0x20 [ 192.508178][ T2770] ? check_preemption_disabled+0x9e/0x330 [ 192.513887][ T2770] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 192.519945][ T2770] ? rmqueue+0x49f/0x2370 [ 192.524263][ T2770] ? stack_trace_save+0x1f0/0x1f0 [ 192.529280][ T2770] ? check_preemption_disabled+0x9e/0x330 [ 192.534989][ T2770] ? __rcu_read_lock+0x50/0x50 [ 192.539862][ T2770] ? __unwind_start+0x72f/0x8e0 [ 192.544790][ T2770] ? debug_smp_processor_id+0x20/0x20 [ 192.550153][ T2770] ? is_bpf_text_address+0x280/0x2a0 [ 192.555429][ T2770] ? stack_trace_save+0x1f0/0x1f0 [ 192.560444][ T2770] ? __kernel_text_address+0x93/0x100 [ 192.565805][ T2770] ? unwind_get_return_address+0x48/0x80 [ 192.571427][ T2770] ? __rcu_read_lock+0x50/0x50 [ 192.576178][ T2770] ? arch_stack_walk+0xf8/0x140 [ 192.581017][ T2770] ? memset+0x1f/0x40 [ 192.584987][ T2770] ? unwind_next_frame+0x1f0a/0x27b0 [ 192.590261][ T2770] ? arch_stack_walk+0xde/0x140 [ 192.595111][ T2770] ? blkdev_get+0x390/0x390 [ 192.599611][ T2770] ? __rcu_read_lock+0x50/0x50 [ 192.604491][ T2770] ? _raw_spin_unlock+0x49/0x60 [ 192.609344][ T2770] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 192.615401][ T2770] ? mntput_no_expire+0x114/0xbd0 [ 192.620417][ T2770] ? stack_trace_save+0x1f0/0x1f0 [ 192.625438][ T2770] ? check_preemption_disabled+0x9e/0x330 [ 192.631151][ T2770] ? __rcu_read_lock+0x50/0x50 [ 192.635905][ T2770] ? __unwind_start+0x72f/0x8e0 [ 192.640747][ T2770] ? debug_smp_processor_id+0x20/0x20 [ 192.646109][ T2770] ? lo_release+0x1e0/0x1e0 [ 192.650607][ T2770] blkdev_ioctl+0x8f7/0x2ce0 [ 192.655192][ T2770] ? __kernel_text_address+0x93/0x100 [ 192.660554][ T2770] ? unwind_get_return_address+0x48/0x80 [ 192.666187][ T2770] ? __blkdev_driver_ioctl+0xd0/0xd0 [ 192.671464][ T2770] ? arch_stack_walk+0xf8/0x140 [ 192.676310][ T2770] ? __rcu_read_lock+0x50/0x50 [ 192.681093][ T2770] ? check_preemption_disabled+0x154/0x330 [ 192.686895][ T2770] ? avc_has_extended_perms+0x72a/0x1140 [ 192.692533][ T2770] ? avc_has_extended_perms+0xb5e/0x1140 [ 192.698160][ T2770] ? avc_ss_reset+0x3a0/0x3a0 [ 192.702829][ T2770] ? do_sys_open+0x62e/0x7c0 [ 192.707420][ T2770] block_ioctl+0xa8/0xe0 [ 192.712041][ T2770] ? blkdev_iopoll+0xf0/0xf0 [ 192.716621][ T2770] do_vfs_ioctl+0x76a/0x1720 [ 192.721206][ T2770] ? selinux_file_ioctl+0x72f/0x990 [ 192.726395][ T2770] ? ioctl_preallocate+0x250/0x250 [ 192.731499][ T2770] ? __fget+0x37b/0x3c0 [ 192.735649][ T2770] ? fget_many+0x20/0x20 [ 192.739882][ T2770] ? debug_smp_processor_id+0x20/0x20 [ 192.745427][ T2770] ? __x64_sys_pwrite64+0x1d9/0x240 [ 192.750617][ T2770] ? security_file_ioctl+0x9d/0xb0 [ 192.755716][ T2770] __x64_sys_ioctl+0xd4/0x110 [ 192.760387][ T2770] do_syscall_64+0xcb/0x1e0 [ 192.764879][ T2770] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 192.770756][ T2770] RIP: 0033:0x466217 [ 192.774763][ T2770] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 192.794358][ T2770] RSP: 002b:00007f71fc0d6f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.802762][ T2770] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000466217 [ 192.810724][ T2770] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 192.818774][ T2770] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 192.826740][ T2770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 192.834701][ T2770] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 192.893385][ T2776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.917419][ T2770] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 192.930449][ T2770] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 192.940293][ T2773] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 02:54:18 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mm_page_free\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup3(r1, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x0, 0x280, 0x0, 0x340, 0x1b8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'vcan0\x00', 'veth0\x00', {0xff}, {}, 0x5e, 0x1, 0xc}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x3]}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x5}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x2, 0x1}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x491, 0xe20, 0xffffffa1, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x20, 0x121}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3f, 0x6}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0xff, 0x2}}}, {{@ip={@loopback, @broadcast, 0x0, 0xff, 'team_slave_1\x00', 'ipvlan0\x00', {0xff}, {}, 0x89, 0x0, 0x67}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) dup2(r4, r3) 02:54:18 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x119, 0x119, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @typedef]}}, 0x0, 0x136}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:18 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0xfffffdef, 0x0, 0x0, 0x0) 02:54:18 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:18 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0xfe, 0x0, 0x6e, 0xa200a, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x2100006, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000200)='./bus\x00') r1 = open(&(0x7f0000000100)='./file1\x00', 0x1518c2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x2ff}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES16=r4, @ANYRESOCT=r5, @ANYRESHEX, @ANYRESHEX, @ANYRES64], 0x116) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 02:54:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:18 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:18 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0xfffffff5, 0x0, 0x0, 0x0) 02:54:18 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @restrict, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:18 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:18 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:18 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000b, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0xda0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x40010, r1, 0xffffc000) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x23, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv6_getnexthop={0x24, 0x6a, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008080}, 0x80) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1, &(0x7f0000000180)=""/88, 0x58}, 0x7ff}], 0x1, 0x12020, &(0x7f0000000280)={r3, r4+60000000}) ioprio_set$pid(0x2, 0x0, 0x4007) clone(0x805000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) flock(r1, 0x2) fcntl$getown(r1, 0x9) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000400)={'filter\x00', 0x7, 0x4, 0x3f8, 0x200, 0x0, 0x200, 0x310, 0x310, 0x310, 0x4, &(0x7f00000003c0), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @rand_addr=0x64010100, @loopback, 0x2, 0x1}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8, 0xf6b9, 0xfff, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x14}, @broadcast, 0xff0000ff, 0xffffffff, 0xf, 0x1, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0x7f, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x5, 0x100, 0x1, 0x800, 0xb2, 0x4, 'veth1_macvtap\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x80}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@local, @rand_addr=0x64010100, @broadcast, 0x4, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x448) [ 193.092430][ T2795] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 193.106629][ T2795] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 193.115692][ T2798] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 02:54:18 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x2, 0x0, 0x0) 02:54:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000200)=@framed={{}, [@ldst={0x0, 0x3, 0x0, 0x0, 0x1}, @map_val]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xa9, &(0x7f00000002c0)=""/169, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='btrfs_handle_em_exist\x00', r0}, 0x10) 02:54:18 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 193.201408][ T2797] overlayfs: filesystem on './file0' not supported as upperdir [ 193.215446][ T2821] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. 02:54:19 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) close(r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = perf_event_open(&(0x7f00000015c0)={0x2, 0x70, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newchain={0x2c, 0x64, 0x501, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x6, 0x3}, {0xffe0, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000024001d0f0000000001000000000000008cc67655d4a7e69d0a0ee2b7860fc2d3db52c7f2c6d0248daf73b9c0bc7b4a67383f6b4030d3b47d459085320ee6e38e0614663af4da020aaab89d248c866626c0c15dc1817ef7e80176a9813b259af825d9085ad4b59e3147ffe0e6635633488295245a6dcdf783", @ANYRES32=r6, @ANYBLOB="00000000f1ffffff000000000b00010064736d61726b00000c0002000600010004000000"], 0x3c}}, 0x0) 02:54:19 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x4, 0x0, 0x0) 02:54:19 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32383839333038373500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000001d72581da2224158b58973c82eb77a3b010000000c00000000000000d7f4655f00"/64, 0x40, 0x104e0}, {&(0x7f0000010200)="0100000000000500110000000000000000000000040000003c00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="030000001300000023000000ce000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="fffffffffcff0700000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x480, 0xc00}, {&(0x7f0000010a00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x1400}, {&(0x7f0000010b00)="00000000000400"/32, 0x20, 0x1800}, {&(0x7f0000010c00)="00000000000400"/32, 0x20, 0x1c00}, {&(0x7f0000010d00)="00000000000400"/32, 0x20, 0x2000}, {&(0x7f0000010e00)="00000000000400"/32, 0x20, 0x2400}, {&(0x7f0000010f00)="00000000000400"/32, 0x20, 0x2800}, {&(0x7f0000011000)="00000000000400"/32, 0x20, 0x2c00}, {&(0x7f0000011100)="00000000000400"/32, 0x20, 0x3000}, {&(0x7f0000011200)="00000000000400"/32, 0x20, 0x3400}, {&(0x7f0000011300)="00000000000400"/32, 0x20, 0x3800}, {&(0x7f0000011400)="00000000000400"/32, 0x20, 0x3c00}, {&(0x7f0000011500)="00000000000400"/32, 0x20, 0x4000}, {&(0x7f0000011600)="504d4d00504d4dffd7f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033300075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x4400}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x4800}, {&(0x7f0000011800)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/1056, 0x420, 0x4c00}, {&(0x7f0000011d00)="0400"/32, 0x20, 0x5400}, {&(0x7f0000000080)="0500"/32, 0x20, 0x5800}, {&(0x7f0000011f00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x5c00}, {&(0x7f0000012000)="0200"/32, 0x20, 0x6000}, {&(0x7f0000012100)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6400}, {&(0x7f0000012200)="0300"/32, 0x20, 0x6800}, {&(0x7f0000012300)="0400"/32, 0x20, 0x6c00}, {&(0x7f0000012400)="0500"/32, 0x20, 0x7000}, {&(0x7f0000012500)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000007000"/96, 0x60, 0x7400}, {&(0x7f0000000040)="02000000000000000000000000000000000000000000000000000000000000000562", 0x22, 0x7800}, {&(0x7f0000012700)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x7c00}, {&(0x7f0000012800)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8030000000006000000779b539778617474723100000601f00300000000060000007498539778617474723200"/96, 0x60, 0x8000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xattr2\x00\x00xattr1\x00\x00', 0x20, 0x83e0}, {&(0x7f0000012a00)="0000000000000000d7f4655fd7f4655fd7f4655f00"/32, 0x20, 0x8c00}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f00000000000004000200000000000800050000000af301000400000000000000000000000100000004000000", 0x40, 0x8c80}, {&(0x7f0000012c00)="8081000000180000d7f4655fd7f4655fd7f4655f00000000000001000c00000010000800000000000af303000400000000000000000000000100000012000000010000000100000018000000020000000400000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000008081000000180000d7f4655fd7f4655fd7f4655f00000000000001000c00000010000800000000000af30300040000000000000000000000010000001900000001000000010000001e00000002000000040000001a00"/224, 0xe0, 0x8d00}, {&(0x7f0000012d00)="c041000000300000d7f4655fd7f4655fd7f4655f00000000000002001800000000000800000000000af301000400000000000000000000000c00000005000000", 0x40, 0x9100}, {&(0x7f0000012e00)="ed41000000040000d7f4655fd7f4655fd7f4655f00000000000002000200000000000800030000000af30100040000000000000000000000010000001f0000000000000000000000000000000000000000000000000000000000000000000000000000008ea357f5000000000000000000000000000000000000000000000000ed8100001a040000d7f4655fd7f4655fd7f4655f00000000000001000400000000000800010000000af30100040000000000000000000000020000002700000000000000000000000000000000000000000000000000000000000000000000000000000074e121ec000000000000000000000000000000000000000000000000ffa1000026000000d7f4655fd7f4655fd7f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3238383933303837352f66696c65302f66696c653000000000000000000000000000000000000000000000e3b62488000000000000000000000000000000000000000000000000ed8100000a000000d7f4655fd7f4655fd7f4655f00000000000001000400000000000800010000000af301000400000000000000000000000100000029000000000000000000000000000000000000000000000000000000000000000000000000000000be68560c200000000000000000000000000000000000000000000000ed81000028230000d7f4655fd7f4655fd7f4655f00000000000002001200000000000800010000000af30100040000000000000000000000090000002a000000000000000000000000000000000000000000000000000000000000000000000000000000aa7d8da5000000000000000000000000000000000000000000000000ed81000064000000d7f4655fd7f4655fd7f4655f00000000000001000200000000000800010000000af3010004000000000000000000000001000000330000000000000000000000000000000000000000000000000000000000000000000000000000002b3d7d3c00"/768, 0x300, 0x9180}, {&(0x7f0000013100)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x9c00}, {&(0x7f0000013600)='syzkallers\x00'/32, 0x20, 0xa400}, {&(0x7f0000013700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0xcc00}], 0x0, &(0x7f0000013800)) open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x19) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x800, 0x6) 02:54:19 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) [ 193.249266][ T2821] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 193.259511][ T2822] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 02:54:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, 0x0) 02:54:19 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 193.344624][ T2821] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 193.362007][ T2821] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 193.389051][ T2851] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.404856][ T2862] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 02:54:19 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:19 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, 0x0) 02:54:19 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x7, 0x0, 0x0) 02:54:19 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5, 0xeb55}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x4d5, 0x4, 0x1, {0x0, 0x0, r2}}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x82) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r3 = open(&(0x7f0000000040)='./file0\x00', 0x14b042, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x0, r0}) perf_event_open(&(0x7f0000000380)={0x4, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0xfaf, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0xa40, 0x0) openat(r5, &(0x7f0000000240)='./file0\x00', 0x400200, 0xe2) lseek(r0, 0x0, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) 02:54:19 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:19 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, 0x0) 02:54:19 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}, {}]}, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 193.637861][ T2877] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 193.650844][ T2877] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:19 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x10, 0x0, 0x0) [ 193.742515][ T2877] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 193.779570][ T2877] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:22 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5, 0xeb55}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x4d5, 0x4, 0x1, {0x0, 0x0, r2}}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x82) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r3 = open(&(0x7f0000000040)='./file0\x00', 0x14b042, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x0, r0}) perf_event_open(&(0x7f0000000380)={0x4, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0xfaf, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0xa40, 0x0) openat(r5, &(0x7f0000000240)='./file0\x00', 0x400200, 0xe2) lseek(r0, 0x0, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) 02:54:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) 02:54:22 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf9, 0xf9, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x116}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:22 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x700, 0x0, 0x0) 02:54:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:22 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5, 0xeb55}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x4d5, 0x4, 0x1, {0x0, 0x0, r2}}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x82) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r3 = open(&(0x7f0000000040)='./file0\x00', 0x14b042, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x0, r0}) perf_event_open(&(0x7f0000000380)={0x4, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0xfaf, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0xa40, 0x0) openat(r5, &(0x7f0000000240)='./file0\x00', 0x400200, 0xe2) lseek(r0, 0x0, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) 02:54:22 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf9, 0xf9, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x116}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:22 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf9, 0xf9, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x116}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 196.321103][ T2907] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 196.340158][ T2906] EXT4-fs (loop3): Can't read superblock on 2nd try [ 196.350831][ T2907] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) 02:54:22 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x4000, 0x0, 0x0) 02:54:22 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:22 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 196.480141][ T2925] EXT4-fs (loop3): Can't read superblock on 2nd try [ 196.490224][ T2907] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 196.519760][ T2907] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:22 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)) 02:54:22 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {0x0, 0x2}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:22 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x40000, 0x0, 0x0) 02:54:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000ea50826484a69aae0063d60cc56e0000", @ANYRES32=r1, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c00058005001d000100000008001c"], 0x4c}}, 0x0) fchdir(0xffffffffffffffff) 02:54:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, @thr={&(0x7f0000000580), 0x0}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x1692c0, 0x20) r2 = getpid() timer_create(0x3, &(0x7f0000000000)={0x0, 0x19, 0x0, @tid=r2}, &(0x7f0000000080)=0x0) flock(r1, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000180)={{r4, r5+10000000}, {0x77359400}}, &(0x7f00000001c0)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$TIPC_IMPORTANCE(r7, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {r8, r9+60000000}}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000040)) fchdir(r0) sendfile(r1, r6, 0x0, 0x4000000000010046) [ 196.965005][ T2953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20714 sclass=netlink_route_socket pid=2953 comm=syz-executor.4 [ 196.981395][ T2955] EXT4-fs (loop3): Can't read superblock on 2nd try [ 196.984319][ T2961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20714 sclass=netlink_route_socket pid=2961 comm=syz-executor.4 02:54:22 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:22 executing program 3 (fault-call:0 fault-nth:0): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:22 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000f18000/0x1000)=nil, 0x1000, 0xb, 0x12, r2, 0xb235000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=@newpolicy={0xfc, 0x13, 0xf05, 0x0, 0x0, {{@in6=@private2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{}, 0x0, @in6=@remote}]}]}, 0xfc}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0xf1, 0x0) 02:54:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000200)={0x2, 0x0, [0x4b564d03, 0x100000001]}) r3 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)="240000002e00070f8bfffd946fa2830022200afffffffffffff000e50c1be3a20400007e", 0x24}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, r1, &(0x7f00003aa000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000280)="c4e27d0f7fb50f46461ff0801e780f2142642e3ef367670f0666ba430066edd35f00f2a766ba200066b8000066ef66baf80cb88c806584ef66bafc0c66b8f1f266ef", 0x42}], 0x1, 0x26, &(0x7f0000000300)=[@efer={0x2, 0x2900}, @flags], 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000068a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="01f7ed83a00000000800006e00000000"]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r6, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 197.014297][ T2954] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 197.037354][ T2954] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 197.045000][ T2967] FAULT_INJECTION: forcing a failure. [ 197.045000][ T2967] name failslab, interval 1, probability 0, space 0, times 0 [ 197.064543][ T2967] CPU: 0 PID: 2967 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 197.074709][ T2967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.084746][ T2967] Call Trace: [ 197.088032][ T2967] dump_stack+0x1d8/0x24e [ 197.092383][ T2967] ? devkmsg_release+0x11c/0x11c [ 197.097308][ T2967] ? show_regs_print_info+0x12/0x12 [ 197.102520][ T2967] should_fail+0x6f6/0x860 [ 197.106917][ T2967] ? setup_fault_attr+0x3d0/0x3d0 [ 197.111919][ T2967] ? fput_many+0x42/0x1a0 [ 197.116231][ T2967] ? check_preemption_disabled+0x154/0x330 [ 197.122226][ T2967] ? __se_sys_memfd_create+0xe9/0x360 [ 197.127785][ T2967] should_failslab+0x5/0x20 [ 197.132262][ T2967] __kmalloc+0x5f/0x2f0 [ 197.136392][ T2967] ? __ia32_sys_read+0x80/0x80 [ 197.141130][ T2967] ? strnlen_user+0x186/0x210 [ 197.145806][ T2967] __se_sys_memfd_create+0xe9/0x360 [ 197.150988][ T2967] do_syscall_64+0xcb/0x1e0 [ 197.155464][ T2967] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 197.161343][ T2967] RIP: 0033:0x466459 [ 197.165211][ T2967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 197.184786][ T2967] RSP: 002b:00007fcd89e23f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 197.193167][ T2967] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 197.201110][ T2967] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000004beba8 02:54:22 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:22 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:23 executing program 3 (fault-call:0 fault-nth:1): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 197.209057][ T2967] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 197.217002][ T2967] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 197.224996][ T2967] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 02:54:23 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:23 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x400000, 0x0, 0x0) 02:54:23 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x1, 0x1, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000e67d0000000000950000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x4) r2 = open(0x0, 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001400), 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000840)={'filter\x00', 0x1002, 0x4, 0x3d0, 0x5202, 0x0, 0x3d0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty=0xe4010000, 0x0, 0x0, 0x0, 0x0, {@empty=[0x0, 0x2, 0x0, 0x0, 0xa]}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'tunl0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2e8}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netdevsim0\x00', 'ip6tnl0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev, @empty, @local, @loopback}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x420) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x240040, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x0) bind(r4, &(0x7f00000002c0)=@ax25={{0x3, @default, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x80) 02:54:23 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:23 executing program 0: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000200)=ANY=[], 0xffffffe3) io_setup(0x81, &(0x7f0000000040)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000100)="b69bdb8e988567ec4697ce6387dbeb367c04924d8a866e14338b9125fd2f52008d18d8f4464b4a0429d2bbdf93476bdf22f310ffc29f1d3a8f12d402ff60aab398edb20b16d3d3d386d214a2dc1a33ea2ee9cedefc6fe9a7e760667c0db4f1365e906f98d59f340b870749b97aacce5af00dd086418603cf64843783ebfa57ead637a0e5f6f0e275f6cc0efcf8bbdb856028e32c6149bb087cd07317a8d8bebdc546c074bdeea1d34536ee24c652", 0xae, 0x9, 0x0, 0x1, r2}]) r3 = syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x7, 0x220001) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000240)) fcntl$setstatus(r0, 0x4, 0x6800) lseek(r0, 0x3, 0x3) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) fallocate(r0, 0x0, 0x0, 0x3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 197.317506][ T2986] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 197.342283][ T2986] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 197.348477][ T2998] FAULT_INJECTION: forcing a failure. [ 197.348477][ T2998] name failslab, interval 1, probability 0, space 0, times 0 [ 197.401867][ T2986] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 197.410016][ T2998] CPU: 1 PID: 2998 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 197.424825][ T2998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.434678][ T2986] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 197.434873][ T2998] Call Trace: [ 197.447084][ T2998] dump_stack+0x1d8/0x24e [ 197.451414][ T2998] ? devkmsg_release+0x11c/0x11c [ 197.456347][ T2998] ? show_regs_print_info+0x12/0x12 [ 197.461538][ T2998] ? __kasan_kmalloc+0x1a3/0x1e0 [ 197.466472][ T2998] ? __kmalloc+0x174/0x2f0 [ 197.470882][ T2998] ? __se_sys_memfd_create+0xe9/0x360 [ 197.476244][ T2998] ? do_syscall_64+0xcb/0x1e0 [ 197.480910][ T2998] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 197.486964][ T2998] should_fail+0x6f6/0x860 [ 197.491373][ T2998] ? setup_fault_attr+0x3d0/0x3d0 [ 197.496388][ T2998] ? expand_files+0xd1/0x970 [ 197.500971][ T2998] ? shmem_alloc_inode+0x16/0x30 [ 197.505898][ T2998] should_failslab+0x5/0x20 [ 197.510388][ T2998] kmem_cache_alloc+0x36/0x290 [ 197.515147][ T2998] ? shmem_match+0x150/0x150 [ 197.519746][ T2998] shmem_alloc_inode+0x16/0x30 [ 197.524518][ T2998] new_inode_pseudo+0x61/0x220 [ 197.529271][ T2998] new_inode+0x25/0x1d0 [ 197.533416][ T2998] shmem_get_inode+0x113/0x630 [ 197.538185][ T2998] ? _raw_spin_unlock+0x49/0x60 [ 197.543026][ T2998] __shmem_file_setup+0x11e/0x270 02:54:23 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4d2600, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x0) getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xb) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x3200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x4) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {}, {0x2, 0x1, @local}, {0x2, 0x4e22, @empty}, 0x108, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x0, 0x3f}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0xfffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="4d2ca31bd9eed88b003ffdc5345f563eb0036f40a4df9965686c1f0000008dbb78f2a122e909431e64adc859b6ec8f2343a25275b2cc3bf90c7d916f532f609102b27f2b2fcc7cc84db727e5d53601000000f145bcb6fd02f358df6f409492312b57a3657b8c086fd1b7c0d5eb74c8e21cc3d601430c2af6b64f6e06c82960ebd6ad1e2732cba649e1852e755a290600f7069988cf40ac685f70bca11889ad39c7d5c5beb9227dbf8c943489144f061264c0684b6a94a41fa092000000"], 0xbf) unshare(0x60000000) [ 197.548053][ T2998] __se_sys_memfd_create+0x1ce/0x360 [ 197.553327][ T2998] do_syscall_64+0xcb/0x1e0 [ 197.557821][ T2998] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 197.563701][ T2998] RIP: 0033:0x466459 [ 197.567587][ T2998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 197.587343][ T2998] RSP: 002b:00007fcd89e23f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 02:54:23 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:23 executing program 3 (fault-call:0 fault-nth:2): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:23 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x800000, 0x0, 0x0) 02:54:23 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) [ 197.595728][ T2998] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 197.603678][ T2998] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000004beba8 [ 197.611631][ T2998] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 197.619589][ T2998] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 197.627550][ T2998] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 02:54:23 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 197.702159][ T3026] FAULT_INJECTION: forcing a failure. [ 197.702159][ T3026] name failslab, interval 1, probability 0, space 0, times 0 [ 197.718774][ T3025] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. 02:54:23 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd={0x20003}, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:23 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 197.757546][ T3025] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 197.768725][ T3026] CPU: 0 PID: 3026 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 197.778880][ T3026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.788923][ T3026] Call Trace: [ 197.792206][ T3026] dump_stack+0x1d8/0x24e [ 197.796534][ T3026] ? devkmsg_release+0x11c/0x11c [ 197.801465][ T3026] ? show_regs_print_info+0x12/0x12 [ 197.806659][ T3026] should_fail+0x6f6/0x860 [ 197.811070][ T3026] ? setup_fault_attr+0x3d0/0x3d0 [ 197.816115][ T3026] ? security_inode_alloc+0x32/0x1d0 [ 197.821387][ T3026] should_failslab+0x5/0x20 [ 197.825880][ T3026] kmem_cache_alloc+0x36/0x290 [ 197.830631][ T3026] security_inode_alloc+0x32/0x1d0 [ 197.835731][ T3026] inode_init_always+0x387/0x810 [ 197.840659][ T3026] ? shmem_match+0x150/0x150 [ 197.845239][ T3026] new_inode_pseudo+0x90/0x220 [ 197.849995][ T3026] new_inode+0x25/0x1d0 02:54:23 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x804000, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) ftruncate(r1, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x0, 0x0, 0x149}) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x400000, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x6, r2, 0x812, 0x0, 0x3c}) 02:54:23 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 197.854146][ T3026] shmem_get_inode+0x113/0x630 [ 197.858905][ T3026] ? _raw_spin_unlock+0x49/0x60 [ 197.863748][ T3026] __shmem_file_setup+0x11e/0x270 [ 197.868767][ T3026] __se_sys_memfd_create+0x1ce/0x360 [ 197.874045][ T3026] do_syscall_64+0xcb/0x1e0 [ 197.878540][ T3026] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 197.884427][ T3026] RIP: 0033:0x466459 [ 197.888311][ T3026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:54:23 executing program 3 (fault-call:0 fault-nth:3): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 197.907926][ T3026] RSP: 002b:00007fcd89e23f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 197.916312][ T3026] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 197.924260][ T3026] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000004beba8 [ 197.932205][ T3026] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 197.940149][ T3026] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 197.948095][ T3026] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 [ 197.984804][ T3025] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 197.987121][ T3047] FAULT_INJECTION: forcing a failure. [ 197.987121][ T3047] name failslab, interval 1, probability 0, space 0, times 0 [ 198.013840][ T3025] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 198.024200][ T3047] CPU: 0 PID: 3047 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 198.034352][ T3047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.044398][ T3047] Call Trace: [ 198.047685][ T3047] dump_stack+0x1d8/0x24e [ 198.052038][ T3047] ? devkmsg_release+0x11c/0x11c [ 198.056988][ T3047] ? show_regs_print_info+0x12/0x12 [ 198.062179][ T3047] should_fail+0x6f6/0x860 [ 198.066586][ T3047] ? setup_fault_attr+0x3d0/0x3d0 [ 198.071603][ T3047] ? __d_alloc+0x2a/0x6a0 [ 198.075922][ T3047] should_failslab+0x5/0x20 [ 198.080416][ T3047] kmem_cache_alloc+0x36/0x290 [ 198.085172][ T3047] ? security_inode_alloc+0x32/0x1d0 [ 198.090446][ T3047] __d_alloc+0x2a/0x6a0 [ 198.094602][ T3047] ? ktime_get_coarse_real_ts64+0xcf/0xe0 [ 198.100325][ T3047] d_alloc_pseudo+0x19/0x70 [ 198.104805][ T3047] alloc_file_pseudo+0x13f/0x300 [ 198.109720][ T3047] ? alloc_empty_file_noaccount+0x70/0x70 [ 198.115420][ T3047] __shmem_file_setup+0x194/0x270 [ 198.120694][ T3047] __se_sys_memfd_create+0x1ce/0x360 [ 198.125975][ T3047] do_syscall_64+0xcb/0x1e0 [ 198.130472][ T3047] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 198.136348][ T3047] RIP: 0033:0x466459 [ 198.140236][ T3047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 198.159825][ T3047] RSP: 002b:00007fcd89e23f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 198.168208][ T3047] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 198.176246][ T3047] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000004beba8 [ 198.184199][ T3047] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 198.192238][ T3047] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 198.200200][ T3047] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 02:54:24 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x12000) write$P9_RMKDIR(r0, &(0x7f00000000c0)={0x14, 0x49, 0x1, {0x80, 0x0, 0x2}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000197000/0x1000)=nil, 0x1000, 0x2) sigaltstack(&(0x7f0000284000/0x3000)=nil, &(0x7f0000000000)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00002f5ff8)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f000032a000/0x2000)=nil, 0x2000) madvise(&(0x7f00005ea000/0x2000)=nil, 0x2000, 0x1) close(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') mremap(&(0x7f000038b000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) r3 = socket$netlink(0x10, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x7fffffff) 02:54:24 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x1000000, 0x0, 0x0) 02:54:24 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:24 executing program 3 (fault-call:0 fault-nth:4): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:24 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x804000, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) ftruncate(r1, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x0, 0x0, 0x149}) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x400000, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x6, r2, 0x812, 0x0, 0x3c}) 02:54:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) [ 198.483812][ T3060] FAULT_INJECTION: forcing a failure. [ 198.483812][ T3060] name failslab, interval 1, probability 0, space 0, times 0 [ 198.496456][ T3060] CPU: 1 PID: 3060 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 198.506598][ T3060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.516760][ T3060] Call Trace: [ 198.520054][ T3060] dump_stack+0x1d8/0x24e [ 198.524383][ T3060] ? devkmsg_release+0x11c/0x11c [ 198.529316][ T3060] ? unwind_next_frame+0x1f0a/0x27b0 [ 198.534597][ T3060] ? show_regs_print_info+0x12/0x12 [ 198.539791][ T3060] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 198.545855][ T3060] should_fail+0x6f6/0x860 [ 198.550265][ T3060] ? setup_fault_attr+0x3d0/0x3d0 [ 198.555276][ T3060] ? ebitmap_cmp+0x1b8/0x220 [ 198.559859][ T3060] ? mls_compute_context_len+0x7dd/0x810 [ 198.565568][ T3060] ? context_struct_to_string+0x43b/0x8b0 [ 198.571280][ T3060] should_failslab+0x5/0x20 [ 198.575778][ T3060] __kmalloc+0x5f/0x2f0 02:54:24 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {0xfffffffc}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:24 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) getresgid(0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x80) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x10000) sendfile(r0, r1, 0x0, 0x10000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 198.579925][ T3060] context_struct_to_string+0x43b/0x8b0 [ 198.585461][ T3060] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 198.591521][ T3060] ? security_bounded_transition+0x560/0x560 [ 198.597493][ T3060] ? symhash+0xe0/0xe0 [ 198.601558][ T3060] ? hashtab_search+0x1bf/0x200 [ 198.606407][ T3060] context_add_hash+0x13f/0x270 [ 198.611259][ T3060] ? security_sid_to_context_inval+0x40/0x40 [ 198.617232][ T3060] ? mls_context_isvalid+0x98/0x380 [ 198.622421][ T3060] ? policydb_context_isvalid+0x1b6/0x400 [ 198.628132][ T3060] security_compute_sid+0x1142/0x1d00 [ 198.633115][ T3067] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 198.633498][ T3060] ? security_transition_sid+0x90/0x90 [ 198.651590][ T3060] ? stack_trace_save+0x120/0x1f0 [ 198.652040][ T3067] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 198.656636][ T3060] ? __kasan_kmalloc+0x1a3/0x1e0 [ 198.656644][ T3060] ? __kasan_kmalloc+0x137/0x1e0 [ 198.656652][ T3060] ? kmem_cache_alloc+0x115/0x290 02:54:24 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x112}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 198.656658][ T3060] ? __d_alloc+0x2a/0x6a0 [ 198.656663][ T3060] ? d_alloc_pseudo+0x19/0x70 [ 198.656671][ T3060] ? alloc_file_pseudo+0x13f/0x300 [ 198.656679][ T3060] ? __shmem_file_setup+0x194/0x270 [ 198.656687][ T3060] ? __se_sys_memfd_create+0x1ce/0x360 [ 198.656695][ T3060] ? do_syscall_64+0xcb/0x1e0 [ 198.656704][ T3060] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 198.656715][ T3060] ? _raw_spin_lock+0xa3/0x1b0 [ 198.656724][ T3060] ? _raw_spin_trylock_bh+0x1a0/0x1a0 [ 198.656733][ T3060] security_transition_sid+0x78/0x90 [ 198.656743][ T3060] inode_doinit_with_dentry+0x5e1/0x11d0 [ 198.656754][ T3060] ? sb_finish_set_opts+0x7b0/0x7b0 [ 198.656759][ T3060] ? __d_alloc+0x2a/0x6a0 [ 198.656766][ T3060] ? kmem_cache_alloc+0x115/0x290 [ 198.656775][ T3060] security_d_instantiate+0xa5/0x100 [ 198.656783][ T3060] d_instantiate+0x51/0x90 [ 198.656791][ T3060] alloc_file_pseudo+0x259/0x300 [ 198.656800][ T3060] ? alloc_empty_file_noaccount+0x70/0x70 [ 198.656809][ T3060] __shmem_file_setup+0x194/0x270 [ 198.656817][ T3060] __se_sys_memfd_create+0x1ce/0x360 [ 198.656832][ T3060] do_syscall_64+0xcb/0x1e0 [ 198.786869][ T3060] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 198.792739][ T3060] RIP: 0033:0x466459 [ 198.796608][ T3060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 198.816302][ T3060] RSP: 002b:00007fcd89e23f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 198.824710][ T3060] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 02:54:24 executing program 0: fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffffd) mknod(0x0, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) r0 = open(0x0, 0x525002, 0x5d) dup(0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x380, 0x0) sendfile(r1, r0, &(0x7f0000000180)=0x3ff, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000000000000100000000000000842281d746b6b4c0060000000000000001000100000000000800dd8631562d5293f9a62329ecf1d37d0000000000000600000000000000000000002f2ea810343e530a0000000000000000000000000400000000000000000000000000e8ff0000000000001d010000000000000005000000000000000000000000000000000000000000000004000400000000000000000000000000ff7fffffffffff080000000000000000000000000000000000000000000000080400000000000000000000ad6100000000010000000000d709000000000000060000000000000000000000000000000000000000ae3587fa4b4f3c520000000000000000001b000000000000000000020000000000000000a00000000000000000000000000000000000000000000008040000d600000000000000000000000180000001000042e57bc498f613000000000000000000000000000000000009020000000000000000000000000000444c9c80f5ffa304bdae9dc7814922b8285218f25e03578c31a14dc0718eae06000000e062fbe01b98cbce74308c1484d8d3f8cf6ce7e57db8dcf195ad70cfcabeb4a4d6abf1201f5c2eafdb3523f1050af7d569480356302b815fd4632dbc8079af634e3be8758179e01c66d9144bdc859141c531c44212b68860dfdf21348a087bfdb9efdbd408bdff9e0421000000000000e3780bcdb0feed0d0000000000002164587ef97751010f7bfbddeba7a13944afc4cc9e637e3e440ea511094978a12caf8b44c124b6405ea4929ce9efe76171ea61f779a208f05b14d462432e035bbd3035ae07"]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000006000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) r2 = socket$inet_udp(0x2, 0x2, 0x0) keyctl$assume_authority(0x10, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x3220c, 0x0, 0x0, 0x0, 0x0, 0xfff7ffff, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x2000, @remote}, {0x2, 0x1, @remote}, {0x2, 0x4e24, @remote}, 0x156, 0x0, 0x2, 0x46a, 0x1, 0x0, 0x6, 0x3ffffffffffffffd}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x7f, 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000009, 0x10, r2, 0xfcb83000) unshare(0x60000000) [ 198.832656][ T3060] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000004beba8 [ 198.840619][ T3060] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 198.848564][ T3060] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 198.856508][ T3060] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 02:54:24 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x2000000, 0x0, 0x0) 02:54:24 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x2) open(0x0, 0x141042, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f00000000c0)) socket(0x11, 0x0, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x50d, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x0, 0x0, 0x0, 0x4, 0x3ff}, r1, 0xffffffffffffffff, r2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="240000004f00070301fffd946fa28300a9ea9abc798712cc001d85680c1ba3a20400ff7e280000002600ffff", 0x2c}], 0x1}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) preadv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000200)=""/235, 0xeb}], 0x2, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x6ff5d, 0x0) 02:54:24 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x112}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 198.951811][ T3067] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 198.978789][ T3060] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:24 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf5, 0xf5, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x112}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:24 executing program 3 (fault-call:0 fault-nth:5): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 198.999462][ T3067] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:24 executing program 0: fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffffd) mknod(0x0, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) r0 = open(0x0, 0x525002, 0x5d) dup(0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x380, 0x0) sendfile(r1, r0, &(0x7f0000000180)=0x3ff, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000000000000100000000000000842281d746b6b4c0060000000000000001000100000000000800dd8631562d5293f9a62329ecf1d37d0000000000000600000000000000000000002f2ea810343e530a0000000000000000000000000400000000000000000000000000e8ff0000000000001d010000000000000005000000000000000000000000000000000000000000000004000400000000000000000000000000ff7fffffffffff080000000000000000000000000000000000000000000000080400000000000000000000ad6100000000010000000000d709000000000000060000000000000000000000000000000000000000ae3587fa4b4f3c520000000000000000001b000000000000000000020000000000000000a00000000000000000000000000000000000000000000008040000d600000000000000000000000180000001000042e57bc498f613000000000000000000000000000000000009020000000000000000000000000000444c9c80f5ffa304bdae9dc7814922b8285218f25e03578c31a14dc0718eae06000000e062fbe01b98cbce74308c1484d8d3f8cf6ce7e57db8dcf195ad70cfcabeb4a4d6abf1201f5c2eafdb3523f1050af7d569480356302b815fd4632dbc8079af634e3be8758179e01c66d9144bdc859141c531c44212b68860dfdf21348a087bfdb9efdbd408bdff9e0421000000000000e3780bcdb0feed0d0000000000002164587ef97751010f7bfbddeba7a13944afc4cc9e637e3e440ea511094978a12caf8b44c124b6405ea4929ce9efe76171ea61f779a208f05b14d462432e035bbd3035ae07"]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000006000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) r2 = socket$inet_udp(0x2, 0x2, 0x0) keyctl$assume_authority(0x10, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x3220c, 0x0, 0x0, 0x0, 0x0, 0xfff7ffff, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x2000, @remote}, {0x2, 0x1, @remote}, {0x2, 0x4e24, @remote}, 0x156, 0x0, 0x2, 0x46a, 0x1, 0x0, 0x6, 0x3ffffffffffffffd}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x7f, 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000009, 0x10, r2, 0xfcb83000) unshare(0x60000000) 02:54:24 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x4000000, 0x0, 0x0) 02:54:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:24 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 199.069058][ T3101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3101 comm=syz-executor.4 [ 199.095070][ T3101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.135863][ T3114] FAULT_INJECTION: forcing a failure. [ 199.135863][ T3114] name failslab, interval 1, probability 0, space 0, times 0 [ 199.150798][ T3114] CPU: 1 PID: 3114 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 199.160953][ T3114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.170996][ T3114] Call Trace: [ 199.174281][ T3114] dump_stack+0x1d8/0x24e [ 199.178601][ T3114] ? devkmsg_release+0x11c/0x11c [ 199.183537][ T3114] ? show_regs_print_info+0x12/0x12 [ 199.188726][ T3114] ? _raw_spin_lock+0xa3/0x1b0 [ 199.193479][ T3114] should_fail+0x6f6/0x860 [ 199.197883][ T3114] ? setup_fault_attr+0x3d0/0x3d0 [ 199.202897][ T3114] ? _raw_spin_unlock+0x49/0x60 [ 199.207739][ T3114] ? inode_doinit_with_dentry+0x73d/0x11d0 [ 199.213535][ T3114] ? __alloc_file+0x26/0x380 [ 199.218114][ T3114] should_failslab+0x5/0x20 [ 199.222604][ T3114] kmem_cache_alloc+0x36/0x290 [ 199.227363][ T3114] ? _raw_spin_trylock_bh+0x1a0/0x1a0 02:54:25 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 199.232724][ T3114] __alloc_file+0x26/0x380 [ 199.237132][ T3114] ? alloc_empty_file+0x49/0x1b0 [ 199.242065][ T3114] alloc_empty_file+0xa9/0x1b0 [ 199.246824][ T3114] alloc_file+0x57/0x4d0 [ 199.251057][ T3114] alloc_file_pseudo+0x272/0x300 [ 199.255979][ T3114] ? alloc_empty_file_noaccount+0x70/0x70 [ 199.261685][ T3114] __shmem_file_setup+0x194/0x270 [ 199.266704][ T3114] __se_sys_memfd_create+0x1ce/0x360 [ 199.271973][ T3114] do_syscall_64+0xcb/0x1e0 [ 199.276526][ T3114] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 199.282388][ T3114] RIP: 0033:0x466459 [ 199.286253][ T3114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 199.305828][ T3114] RSP: 002b:00007fcd89e23f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 199.314210][ T3114] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 199.322154][ T3114] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000004beba8 02:54:25 executing program 0: fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffffd) mknod(0x0, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) r0 = open(0x0, 0x525002, 0x5d) dup(0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x380, 0x0) sendfile(r1, r0, &(0x7f0000000180)=0x3ff, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000000000000100000000000000842281d746b6b4c0060000000000000001000100000000000800dd8631562d5293f9a62329ecf1d37d0000000000000600000000000000000000002f2ea810343e530a0000000000000000000000000400000000000000000000000000e8ff0000000000001d010000000000000005000000000000000000000000000000000000000000000004000400000000000000000000000000ff7fffffffffff080000000000000000000000000000000000000000000000080400000000000000000000ad6100000000010000000000d709000000000000060000000000000000000000000000000000000000ae3587fa4b4f3c520000000000000000001b000000000000000000020000000000000000a00000000000000000000000000000000000000000000008040000d600000000000000000000000180000001000042e57bc498f613000000000000000000000000000000000009020000000000000000000000000000444c9c80f5ffa304bdae9dc7814922b8285218f25e03578c31a14dc0718eae06000000e062fbe01b98cbce74308c1484d8d3f8cf6ce7e57db8dcf195ad70cfcabeb4a4d6abf1201f5c2eafdb3523f1050af7d569480356302b815fd4632dbc8079af634e3be8758179e01c66d9144bdc859141c531c44212b68860dfdf21348a087bfdb9efdbd408bdff9e0421000000000000e3780bcdb0feed0d0000000000002164587ef97751010f7bfbddeba7a13944afc4cc9e637e3e440ea511094978a12caf8b44c124b6405ea4929ce9efe76171ea61f779a208f05b14d462432e035bbd3035ae07"]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000006000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) r2 = socket$inet_udp(0x2, 0x2, 0x0) keyctl$assume_authority(0x10, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x3220c, 0x0, 0x0, 0x0, 0x0, 0xfff7ffff, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x2000, @remote}, {0x2, 0x1, @remote}, {0x2, 0x4e24, @remote}, 0x156, 0x0, 0x2, 0x46a, 0x1, 0x0, 0x6, 0x3ffffffffffffffd}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x7f, 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000009, 0x10, r2, 0xfcb83000) unshare(0x60000000) 02:54:25 executing program 3 (fault-call:0 fault-nth:6): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 199.330097][ T3114] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 199.338039][ T3114] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 199.345989][ T3114] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 [ 199.373242][ T3112] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. 02:54:25 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x7000000, 0x0, 0x0) [ 199.393291][ T3112] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 199.412295][ T3125] FAULT_INJECTION: forcing a failure. [ 199.412295][ T3125] name failslab, interval 1, probability 0, space 0, times 0 [ 199.430910][ T3125] CPU: 0 PID: 3125 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 199.441129][ T3125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.451179][ T3125] Call Trace: [ 199.454468][ T3125] dump_stack+0x1d8/0x24e [ 199.458791][ T3125] ? devkmsg_release+0x11c/0x11c [ 199.463717][ T3125] ? show_regs_print_info+0x12/0x12 [ 199.468909][ T3125] should_fail+0x6f6/0x860 [ 199.473319][ T3125] ? setup_fault_attr+0x3d0/0x3d0 [ 199.478332][ T3125] ? security_file_alloc+0x32/0x1f0 [ 199.483521][ T3125] should_failslab+0x5/0x20 [ 199.488015][ T3125] kmem_cache_alloc+0x36/0x290 [ 199.492772][ T3125] security_file_alloc+0x32/0x1f0 [ 199.497818][ T3125] __alloc_file+0xba/0x380 [ 199.502373][ T3125] alloc_empty_file+0xa9/0x1b0 [ 199.507131][ T3125] alloc_file+0x57/0x4d0 [ 199.511365][ T3125] alloc_file_pseudo+0x272/0x300 [ 199.516294][ T3125] ? alloc_empty_file_noaccount+0x70/0x70 [ 199.522012][ T3125] __shmem_file_setup+0x194/0x270 [ 199.527026][ T3125] __se_sys_memfd_create+0x1ce/0x360 [ 199.532298][ T3125] do_syscall_64+0xcb/0x1e0 [ 199.536792][ T3125] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 199.542669][ T3125] RIP: 0033:0x466459 [ 199.546550][ T3125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 199.566141][ T3125] RSP: 002b:00007fcd89e23f48 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 199.574768][ T3125] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000466459 [ 199.582728][ T3125] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 00000000004beba8 [ 199.590721][ T3125] RBP: 0000000000000001 R08: 0000000000000400 R09: ffffffffffffffff [ 199.598673][ T3125] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000008100000 [ 199.606620][ T3125] R13: 0000000020000100 R14: 0000000000000800 R15: 0000000020000080 [ 199.641221][ T3112] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 199.655662][ T3112] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:25 executing program 4: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x4000000, 0x0, 0x0) 02:54:25 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:25 executing program 0: fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffffd) mknod(0x0, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) r0 = open(0x0, 0x525002, 0x5d) dup(0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x380, 0x0) sendfile(r1, r0, &(0x7f0000000180)=0x3ff, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000006000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) r2 = socket$inet_udp(0x2, 0x2, 0x0) keyctl$assume_authority(0x10, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x0, @perf_bp={&(0x7f0000000140), 0xb}, 0x3220c, 0x0, 0x0, 0x0, 0x0, 0xfff7ffff, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={0x750, {0x2, 0x2000, @remote}, {0x2, 0x1, @remote}, {0x2, 0x4e24, @remote}, 0x156, 0x0, 0x2, 0x46a, 0x1, 0x0, 0x6, 0x3ffffffffffffffd}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x7f, 0x4) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000009, 0x10, r2, 0xfcb83000) unshare(0x60000000) 02:54:25 executing program 3 (fault-call:0 fault-nth:7): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:25 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x10000000, 0x0, 0x0) 02:54:25 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:25 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:25 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:25 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 199.847084][ T3140] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 199.848975][ T3141] FAULT_INJECTION: forcing a failure. [ 199.848975][ T3141] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 199.879096][ T3140] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 199.917414][ T3141] CPU: 0 PID: 3141 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 199.927591][ T3141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.937639][ T3141] Call Trace: [ 199.940927][ T3141] dump_stack+0x1d8/0x24e [ 199.945256][ T3141] ? devkmsg_release+0x11c/0x11c [ 199.950192][ T3141] ? show_regs_print_info+0x12/0x12 [ 199.955478][ T3141] ? avc_has_perm_noaudit+0x37d/0x400 [ 199.960871][ T3141] should_fail+0x6f6/0x860 [ 199.965277][ T3141] ? setup_fault_attr+0x3d0/0x3d0 [ 199.970292][ T3141] __alloc_pages_nodemask+0x1c4/0x880 [ 199.975655][ T3141] ? selinux_syslog+0x120/0x120 [ 199.980497][ T3141] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 199.986036][ T3141] ? percpu_counter_add_batch+0x14d/0x170 [ 199.991750][ T3141] shmem_getpage_gfp+0xec9/0x2410 [ 199.996770][ T3141] ? shmem_getpage+0xa0/0xa0 [ 200.001486][ T3141] ? __kernel_text_address+0x93/0x100 [ 200.006856][ T3141] ? iov_iter_fault_in_readable+0x2d2/0x640 [ 200.012740][ T3141] ? asan.module_dtor+0x20/0x20 [ 200.017580][ T3141] shmem_write_begin+0xc5/0x190 [ 200.022424][ T3141] generic_perform_write+0x2f9/0x5a0 [ 200.027701][ T3141] ? grab_cache_page_write_begin+0x90/0x90 [ 200.033497][ T3141] ? file_remove_privs+0x630/0x630 [ 200.038601][ T3141] ? down_write+0xd8/0x150 [ 200.043012][ T3141] __generic_file_write_iter+0x239/0x480 [ 200.048642][ T3141] generic_file_write_iter+0x46d/0x600 [ 200.054099][ T3141] __vfs_write+0x5ec/0x780 [ 200.058541][ T3141] ? __kernel_write+0x340/0x340 02:54:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x24, 0x0, 0x5, 0x0, 0x4}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0xfffffffe, 0x1c8, 0x0, 0x1, 0x80000000, 0x40}, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x21) fcntl$setstatus(r5, 0x4, 0x6800) lseek(r5, 0x4200, 0x2) creat(&(0x7f0000000000)='./bus\x00', 0x171) io_setup(0x201, &(0x7f0000000480)) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001}) io_submit(0x0, 0x5, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x5, r5, &(0x7f00000002c0)="fd489ba528ee0b287710a1a92f18f930b97de0fb3f1ac16360fe9d400e8fa31cc4c0763a31df95faffe2f59305619dfd9e75695b8fd8790f212dfe94a294e2b33a7c41ba5530a0d29a8e7187ff3e5d83964ad345702a79c7a2f18180ac84a145224227d84eac85bee621a315c25966b26d4083ff096d42b14057b53671b40d7a6e67ed766e01e51b9f775b92e663ba6de30150c34e5abd1e9ed34ed2268969287ae7292097e31dde5a83e6bfa563bd2c5cd8819890c9d31719790cc978c7d00db90bbaa76adf855f4e003385d90abe", 0xcf, 0x8, 0x0, 0x0, r3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7f, 0xffffffffffffffff, &(0x7f0000000880)="ccc7c76b3fc83b37b4fbc80e4ce9e0b1e81cc4b278ee2213f9448b676ad85fad97088aad5d0e5c71ba411337a534e5a479d65f27acfa5789c716944e34c12c4367fd796819899002c4cac53958edc414491b27f173e0b4590af6ec22beb781234a1c12f72df63d4435789e31cb6ded338fd4d9b2f3c5cd6f42aa71d830dcbc0073e96fe480051ea09f0318ec365a9bc332554379045d08318137d233cade071066ed708dfc86064682607cb4427c9e6c2aa362d508a634316106533a63ec98f06faacd5cee678c867ff1305845e1ae436c73da554ed1a55f", 0xd8, 0x3a6, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, &(0x7f00000019c0)="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", 0x1000, 0xffffffffffffff65, 0x0, 0x2, r2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000640)="d91f6299da1491307356a841540d60ceb1421ccbcf76ac72df3a189a02d3e75bfcdaf5075cf0d038442e72c5f659f90f1276f85e56da1588d47c8f4569ad0463acfb195de3b5ea8576a0ebacf43f37b34967", 0x52, 0x5, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000780)="8228f8d89a56110e1a7988b44c770534f2443788e18fcf9dd30a62c0baaca5b5882336e5110d0c4a92c248c2a666a4bdc4af7611dd5d5fece1a0a1de", 0x3c, 0x4d5c, 0x0, 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff80) [ 200.063387][ T3141] ? check_preemption_disabled+0x9e/0x330 [ 200.069099][ T3141] ? debug_smp_processor_id+0x20/0x20 [ 200.074468][ T3141] vfs_write+0x212/0x4e0 [ 200.078705][ T3141] __x64_sys_pwrite64+0x1af/0x240 [ 200.083710][ T3141] ? ksys_pwrite64+0x1d0/0x1d0 [ 200.088452][ T3141] do_syscall_64+0xcb/0x1e0 [ 200.092930][ T3141] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 200.098796][ T3141] RIP: 0033:0x4195f7 [ 200.102669][ T3141] Code: 08 89 3c 24 48 89 4c 24 18 e8 e5 f8 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 48 8b 74 24 08 8b 3c 24 b8 12 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 04 24 e8 15 f9 ff ff 48 8b [ 200.122246][ T3141] RSP: 002b:00007fcd89e23f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 200.130646][ T3141] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 00000000004195f7 [ 200.138590][ T3141] RDX: 000000000000003a RSI: 0000000020000140 RDI: 0000000000000004 [ 200.146539][ T3141] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffffffffffff [ 200.154502][ T3141] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000004 02:54:25 executing program 4: mount(0x0, 0x0, 0x0, 0x1000000, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) unshare(0x22000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000600)='overlay\x00', 0x1000, &(0x7f0000000700)=ANY=[@ANYBLOB]) r2 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f00000005c0)='tmpfs\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000100)={{0x1b, 0x5b, 0x7, 0x3b, 0x0, 0x32, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @usage=0x24}, {0x1, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, @struct, 0x0, 0x45d}, {0x0, @struct={0x0, 0x81}, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, @struct={0x40}, 0x0, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x7]}}) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', 0x0, 0x0, 0x1, &(0x7f0000001640)=[{0x0, 0x0, 0x2}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRESDEC]) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x2, &(0x7f0000000900)=[{0x0}, {0x0}], 0x80800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x0, 0x94, 0x0, 0x0, 0x4000000000005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2800, 0x200, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) 02:54:25 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x40000000, 0x0, 0x0) 02:54:25 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x2}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 200.162446][ T3141] R13: 0000000000000004 R14: 0000000020000200 R15: 0000000000000000 02:54:25 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:26 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 200.204370][ T3141] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 200.213341][ T3140] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 200.242277][ T3140] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:26 executing program 3 (fault-call:0 fault-nth:8): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:26 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:26 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0xeffdffff, 0x0, 0x0) [ 200.330770][ T3188] FAULT_INJECTION: forcing a failure. [ 200.330770][ T3188] name failslab, interval 1, probability 0, space 0, times 0 [ 200.348856][ T3188] CPU: 0 PID: 3188 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 200.359026][ T3188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.369074][ T3188] Call Trace: [ 200.372364][ T3188] dump_stack+0x1d8/0x24e 02:54:26 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 200.376754][ T3188] ? devkmsg_release+0x11c/0x11c [ 200.376764][ T3188] ? generic_file_write_iter+0x4b6/0x600 [ 200.376775][ T3188] ? show_regs_print_info+0x12/0x12 [ 200.376799][ T3188] should_fail+0x6f6/0x860 [ 200.396926][ T3188] ? setup_fault_attr+0x3d0/0x3d0 [ 200.396936][ T3188] ? __kernel_write+0x340/0x340 [ 200.396947][ T3188] ? check_preemption_disabled+0x9e/0x330 [ 200.396954][ T3188] ? getname_flags+0xba/0x640 [ 200.396962][ T3188] should_failslab+0x5/0x20 [ 200.396970][ T3188] kmem_cache_alloc+0x36/0x290 [ 200.396978][ T3188] getname_flags+0xba/0x640 [ 200.396986][ T3188] do_sys_open+0x33e/0x7c0 [ 200.396995][ T3188] ? check_preemption_disabled+0x154/0x330 [ 200.397004][ T3188] ? file_open_root+0x450/0x450 [ 200.397012][ T3188] ? __x64_sys_pwrite64+0x1d9/0x240 [ 200.397024][ T3188] do_syscall_64+0xcb/0x1e0 [ 200.397032][ T3188] entry_SYSCALL_64_after_hwframe+0x44/0xa9 02:54:26 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 200.397040][ T3188] RIP: 0033:0x419544 [ 200.397049][ T3188] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 200.397053][ T3188] RSP: 002b:00007fcd89e23ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 200.397062][ T3188] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000419544 [ 200.397068][ T3188] RDX: 0000000000000002 RSI: 00007fcd89e24000 RDI: 00000000ffffff9c [ 200.397073][ T3188] RBP: 00007fcd89e24000 R08: 0000000000000000 R09: ffffffffffffffff [ 200.397077][ T3188] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 200.397082][ T3188] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 200.422112][ T3189] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 200.573048][ T3189] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x24, 0x0, 0x5, 0x0, 0x4}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0xfffffffe, 0x1c8, 0x0, 0x1, 0x80000000, 0x40}, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x21) fcntl$setstatus(r5, 0x4, 0x6800) lseek(r5, 0x4200, 0x2) creat(&(0x7f0000000000)='./bus\x00', 0x171) io_setup(0x201, &(0x7f0000000480)) r6 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000001}) io_submit(0x0, 0x5, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x5, r5, &(0x7f00000002c0)="fd489ba528ee0b287710a1a92f18f930b97de0fb3f1ac16360fe9d400e8fa31cc4c0763a31df95faffe2f59305619dfd9e75695b8fd8790f212dfe94a294e2b33a7c41ba5530a0d29a8e7187ff3e5d83964ad345702a79c7a2f18180ac84a145224227d84eac85bee621a315c25966b26d4083ff096d42b14057b53671b40d7a6e67ed766e01e51b9f775b92e663ba6de30150c34e5abd1e9ed34ed2268969287ae7292097e31dde5a83e6bfa563bd2c5cd8819890c9d31719790cc978c7d00db90bbaa76adf855f4e003385d90abe", 0xcf, 0x8, 0x0, 0x0, r3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7f, 0xffffffffffffffff, &(0x7f0000000880)="ccc7c76b3fc83b37b4fbc80e4ce9e0b1e81cc4b278ee2213f9448b676ad85fad97088aad5d0e5c71ba411337a534e5a479d65f27acfa5789c716944e34c12c4367fd796819899002c4cac53958edc414491b27f173e0b4590af6ec22beb781234a1c12f72df63d4435789e31cb6ded338fd4d9b2f3c5cd6f42aa71d830dcbc0073e96fe480051ea09f0318ec365a9bc332554379045d08318137d233cade071066ed708dfc86064682607cb4427c9e6c2aa362d508a634316106533a63ec98f06faacd5cee678c867ff1305845e1ae436c73da554ed1a55f", 0xd8, 0x3a6, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x5, 0xffffffffffffffff, &(0x7f00000019c0)="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", 0x1000, 0xffffffffffffff65, 0x0, 0x2, r2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000640)="d91f6299da1491307356a841540d60ceb1421ccbcf76ac72df3a189a02d3e75bfcdaf5075cf0d038442e72c5f659f90f1276f85e56da1588d47c8f4569ad0463acfb195de3b5ea8576a0ebacf43f37b34967", 0x52, 0x5, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000780)="8228f8d89a56110e1a7988b44c770534f2443788e18fcf9dd30a62c0baaca5b5882336e5110d0c4a92c248c2a666a4bdc4af7611dd5d5fece1a0a1de", 0x3c, 0x4d5c, 0x0, 0x1}]) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff80) 02:54:26 executing program 3 (fault-call:0 fault-nth:9): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:26 executing program 4: mount(0x0, 0x0, 0x0, 0x1000000, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) unshare(0x22000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000600)='overlay\x00', 0x1000, &(0x7f0000000700)=ANY=[@ANYBLOB]) r2 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f00000005c0)='tmpfs\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000100)={{0x1b, 0x5b, 0x7, 0x3b, 0x0, 0x32, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @usage=0x24}, {0x1, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, @struct, 0x0, 0x45d}, {0x0, @struct={0x0, 0x81}, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, @struct={0x40}, 0x0, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x7]}}) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', 0x0, 0x0, 0x1, &(0x7f0000001640)=[{0x0, 0x0, 0x2}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRESDEC]) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x2, &(0x7f0000000900)=[{0x0}, {0x0}], 0x80800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x0, 0x94, 0x0, 0x0, 0x4000000000005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2800, 0x200, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) 02:54:26 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:26 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:26 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0xf5ffffff, 0x0, 0x0) 02:54:26 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:26 executing program 4: mount(0x0, 0x0, 0x0, 0x1000000, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x0) unshare(0x22000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000600)='overlay\x00', 0x1000, &(0x7f0000000700)=ANY=[@ANYBLOB]) r2 = openat(0xffffffffffffffff, &(0x7f0000000440)='/proc/self/exe\x00', 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f00000005c0)='tmpfs\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r3, 0x0) preadv(r3, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000100)={{0x1b, 0x5b, 0x7, 0x3b, 0x0, 0x32, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @usage=0x24}, {0x1, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, @struct, 0x0, 0x45d}, {0x0, @struct={0x0, 0x81}, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, @struct={0x40}, 0x0, 0x0, [0xfffffffffffffffc, 0x0, 0x0, 0x7]}}) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', 0x0, 0x0, 0x1, &(0x7f0000001640)=[{0x0, 0x0, 0x2}], 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRESDEC]) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x2, &(0x7f0000000900)=[{0x0}, {0x0}], 0x80800, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x0, 0x94, 0x0, 0x0, 0x4000000000005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2800, 0x200, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) 02:54:26 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 201.018562][ T3224] FAULT_INJECTION: forcing a failure. [ 201.018562][ T3224] name failslab, interval 1, probability 0, space 0, times 0 [ 201.026547][ T3225] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 201.042596][ T3224] CPU: 1 PID: 3224 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 201.054292][ T3224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.064339][ T3224] Call Trace: 02:54:26 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 201.067632][ T3224] dump_stack+0x1d8/0x24e [ 201.070440][ T3225] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 201.071955][ T3224] ? devkmsg_release+0x11c/0x11c [ 201.071966][ T3224] ? show_regs_print_info+0x12/0x12 [ 201.071981][ T3224] should_fail+0x6f6/0x860 [ 201.095575][ T3224] ? setup_fault_attr+0x3d0/0x3d0 [ 201.095586][ T3224] ? stack_trace_save+0x1f0/0x1f0 [ 201.095595][ T3224] ? __alloc_file+0x26/0x380 [ 201.095605][ T3224] should_failslab+0x5/0x20 [ 201.095614][ T3224] kmem_cache_alloc+0x36/0x290 [ 201.095623][ T3224] __alloc_file+0x26/0x380 [ 201.095630][ T3224] ? alloc_empty_file+0x49/0x1b0 [ 201.095638][ T3224] alloc_empty_file+0xa9/0x1b0 [ 201.095647][ T3224] path_openat+0x125/0x3da0 [ 201.095655][ T3224] ? arch_stack_walk+0xf8/0x140 [ 201.095667][ T3224] ? stack_trace_snprint+0x150/0x150 [ 201.095677][ T3224] ? do_filp_open+0x450/0x450 [ 201.095685][ T3224] ? __kasan_kmalloc+0x137/0x1e0 [ 201.095693][ T3224] ? kmem_cache_alloc+0x115/0x290 [ 201.095699][ T3224] ? getname_flags+0xba/0x640 [ 201.095707][ T3224] ? do_sys_open+0x33e/0x7c0 [ 201.095715][ T3224] ? do_syscall_64+0xcb/0x1e0 [ 201.095724][ T3224] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 201.095741][ T3224] do_filp_open+0x208/0x450 [ 201.095750][ T3224] ? vfs_tmpfile+0x210/0x210 [ 201.095764][ T3224] ? _raw_spin_unlock+0x49/0x60 [ 201.095773][ T3224] ? __alloc_fd+0x4f1/0x590 [ 201.095783][ T3224] do_sys_open+0x383/0x7c0 [ 201.095793][ T3224] ? check_preemption_disabled+0x154/0x330 [ 201.095802][ T3224] ? file_open_root+0x450/0x450 [ 201.095811][ T3224] ? __x64_sys_pwrite64+0x1d9/0x240 [ 201.095822][ T3224] do_syscall_64+0xcb/0x1e0 [ 201.095831][ T3224] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 201.095839][ T3224] RIP: 0033:0x419544 [ 201.095847][ T3224] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 201.095858][ T3224] RSP: 002b:00007fcd89e23ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 02:54:27 executing program 3 (fault-call:0 fault-nth:10): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:27 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0xfffffdef, 0x0, 0x0) [ 201.263565][ T3224] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000419544 [ 201.263570][ T3224] RDX: 0000000000000002 RSI: 00007fcd89e24000 RDI: 00000000ffffff9c [ 201.263575][ T3224] RBP: 00007fcd89e24000 R08: 0000000000000000 R09: ffffffffffffffff [ 201.263579][ T3224] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 201.263584][ T3224] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 201.316039][ T3225] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 201.316048][ T3225] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 201.321252][ T3253] FAULT_INJECTION: forcing a failure. [ 201.321252][ T3253] name failslab, interval 1, probability 0, space 0, times 0 [ 201.359937][ T3253] CPU: 0 PID: 3253 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 201.370418][ T3253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.380446][ T3253] Call Trace: [ 201.383737][ T3253] dump_stack+0x1d8/0x24e [ 201.388041][ T3253] ? devkmsg_release+0x11c/0x11c [ 201.392950][ T3253] ? show_regs_print_info+0x12/0x12 [ 201.398121][ T3253] should_fail+0x6f6/0x860 [ 201.402508][ T3253] ? setup_fault_attr+0x3d0/0x3d0 [ 201.407504][ T3253] ? security_file_alloc+0x32/0x1f0 [ 201.412672][ T3253] should_failslab+0x5/0x20 [ 201.417154][ T3253] kmem_cache_alloc+0x36/0x290 [ 201.421946][ T3253] security_file_alloc+0x32/0x1f0 [ 201.426952][ T3253] __alloc_file+0xba/0x380 [ 201.431346][ T3253] alloc_empty_file+0xa9/0x1b0 [ 201.436083][ T3253] path_openat+0x125/0x3da0 [ 201.440560][ T3253] ? arch_stack_walk+0xf8/0x140 [ 201.445386][ T3253] ? stack_trace_snprint+0x150/0x150 [ 201.450758][ T3253] ? do_filp_open+0x450/0x450 [ 201.455434][ T3253] ? __kasan_kmalloc+0x137/0x1e0 [ 201.460343][ T3253] ? kmem_cache_alloc+0x115/0x290 [ 201.465348][ T3253] ? getname_flags+0xba/0x640 [ 201.469994][ T3253] ? do_sys_open+0x33e/0x7c0 [ 201.474555][ T3253] ? do_syscall_64+0xcb/0x1e0 [ 201.479225][ T3253] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 201.485264][ T3253] do_filp_open+0x208/0x450 [ 201.489738][ T3253] ? vfs_tmpfile+0x210/0x210 [ 201.494347][ T3253] ? _raw_spin_unlock+0x49/0x60 [ 201.499171][ T3253] ? __alloc_fd+0x4f1/0x590 [ 201.503673][ T3253] do_sys_open+0x383/0x7c0 [ 201.508072][ T3253] ? check_preemption_disabled+0x154/0x330 [ 201.513859][ T3253] ? file_open_root+0x450/0x450 [ 201.518696][ T3253] ? __x64_sys_pwrite64+0x1d9/0x240 [ 201.523884][ T3253] do_syscall_64+0xcb/0x1e0 [ 201.528377][ T3253] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 201.534245][ T3253] RIP: 0033:0x419544 [ 201.538117][ T3253] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 201.557701][ T3253] RSP: 002b:00007fcd89e23ed0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 201.566191][ T3253] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000419544 [ 201.574133][ T3253] RDX: 0000000000000002 RSI: 00007fcd89e24000 RDI: 00000000ffffff9c [ 201.582074][ T3253] RBP: 00007fcd89e24000 R08: 0000000000000000 R09: ffffffffffffffff [ 201.590017][ T3253] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 201.597980][ T3253] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 02:54:27 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x121, 0x121, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13e}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:27 executing program 0: setrlimit(0xf, &(0x7f0000000000)={0x7fff, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x2ff}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {}, {0x0, @struct}}) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x126) readv(r3, 0x0, 0x0) 02:54:27 executing program 3 (fault-call:0 fault-nth:11): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000f0dbdf252c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000001a000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x42) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpgid(0x0) perf_event_open(0x0, r1, 0xb, 0xffffffffffffffff, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000140)={0x630, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0x608, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x148, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x200}, @WGPEER_A_ALLOWEDIPS={0x12c, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @loopback}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xb7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffe}}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f738c2c78ad9e65ba55bf2d99ca08ec5088579358f4ac4564fe4b20a97785555"}]}, {0x2e8, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0266fddfb73a8ec4678f5f431235134d41f93d63e6cd05472e813bce3d422d62"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xb03, @dev={0xfe, 0x80, [], 0x3f}, 0x3f}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "56bb471eb44c0db8ebb0b9adc7d484977ebe42fdffa18342a261424225975c1a"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @ipv4={[], [], @rand_addr=0x64010101}, 0x5d}}, @WGPEER_A_ALLOWEDIPS={0x23c, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x3f}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @multicast1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g='\xf4M\xa3g\xa8\x8e\xe6VO\x02\x02\x11Eg\'\b/\\\xeb\xee\x8b\x1b\xf5\xebs74\x1bE\x9b9\"'}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0xd}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "228768dba2692fe7e4c87cd248cd581689199a4e9e015647909b2a12d090a592"}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x55, @empty, 0x401}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3ff, @remote, 0x80000000}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "378cbf27bfee53b532d5a2f0946edbf2b1d2951ccb877cef2a78b1ed6d617372"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x630}, 0x1, 0x0, 0x0, 0x4004004}, 0x14) clone(0x80000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000800)={@multicast1, @rand_addr=0x64010101, 0x1, 0x2, [@rand_addr=0x64010100, @broadcast]}, 0x18) clone(0x50904000, &(0x7f0000000380), 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 02:54:27 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:27 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0xfffffff5, 0x0, 0x0) [ 201.992175][ T3269] FAULT_INJECTION: forcing a failure. [ 201.992175][ T3269] name failslab, interval 1, probability 0, space 0, times 0 [ 202.005425][ T3269] CPU: 0 PID: 3269 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 202.015577][ T3269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.025617][ T3269] Call Trace: [ 202.028903][ T3269] dump_stack+0x1d8/0x24e [ 202.033217][ T3269] ? devkmsg_release+0x11c/0x11c [ 202.038147][ T3269] ? show_regs_print_info+0x12/0x12 [ 202.043434][ T3269] should_fail+0x6f6/0x860 [ 202.047834][ T3269] ? setup_fault_attr+0x3d0/0x3d0 [ 202.052854][ T3269] ? refcount_add_checked+0x50/0x50 [ 202.058031][ T3269] ? mutex_lock+0xa6/0x110 [ 202.062429][ T3269] ? __module_put_and_exit+0x20/0x20 [ 202.067694][ T3269] ? __kthread_create_on_node+0x126/0x410 [ 202.073392][ T3269] should_failslab+0x5/0x20 [ 202.077874][ T3269] kmem_cache_alloc_trace+0x39/0x2b0 [ 202.083162][ T3269] ? loop_set_status_from_info+0x710/0x710 [ 202.088944][ T3269] ? loop_set_status_from_info+0x710/0x710 [ 202.094727][ T3269] __kthread_create_on_node+0x126/0x410 [ 202.100253][ T3269] ? kthread_create_on_node+0x120/0x120 [ 202.105779][ T3269] ? _raw_spin_unlock+0x49/0x60 [ 202.110607][ T3269] ? bd_start_claiming+0x47c/0x590 [ 202.115696][ T3269] ? loop_set_status_from_info+0x710/0x710 [ 202.121480][ T3269] kthread_create_on_node+0xda/0x120 [ 202.126749][ T3269] ? tsk_fork_get_node+0x10/0x10 [ 202.131664][ T3269] ? loop_set_status_from_info+0x2c6/0x710 [ 202.137447][ T3269] ? memcpy+0x38/0x50 [ 202.141406][ T3269] ? memset+0x1f/0x40 [ 202.145452][ T3269] loop_configure+0x7c9/0x1380 [ 202.150197][ T3269] ? preempt_count_add+0x66/0x130 [ 202.155201][ T3269] lo_ioctl+0x820/0x23b0 [ 202.159423][ T3269] ? memset+0x1f/0x40 [ 202.163384][ T3269] ? unwind_next_frame+0x1f0a/0x27b0 [ 202.168646][ T3269] ? lo_release+0x1e0/0x1e0 [ 202.173128][ T3269] ? arch_stack_walk+0xde/0x140 [ 202.177959][ T3269] ? memset+0x1f/0x40 [ 202.181920][ T3269] ? unwind_next_frame+0x1f0a/0x27b0 [ 202.187204][ T3269] ? memset+0x1f/0x40 [ 202.191173][ T3269] ? unwind_next_frame+0x1f0a/0x27b0 [ 202.196442][ T3269] ? arch_stack_walk+0xde/0x140 [ 202.201273][ T3269] ? preempt_count_add+0x66/0x130 [ 202.206275][ T3269] ? unwind_next_frame+0x1f0a/0x27b0 [ 202.211540][ T3269] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 202.217583][ T3269] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 202.223538][ T3269] ? stack_trace_save+0x120/0x1f0 [ 202.228543][ T3269] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 202.234501][ T3269] ? __unwind_start+0x72f/0x8e0 [ 202.239331][ T3269] ? debug_smp_processor_id+0x20/0x20 [ 202.244681][ T3269] ? check_preemption_disabled+0x154/0x330 [ 202.250465][ T3269] ? debug_smp_processor_id+0x20/0x20 [ 202.255815][ T3269] ? check_preemption_disabled+0x9e/0x330 [ 202.261509][ T3269] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 202.267555][ T3269] ? rmqueue+0x49f/0x2370 [ 202.271862][ T3269] ? stack_trace_save+0x1f0/0x1f0 [ 202.276867][ T3269] ? check_preemption_disabled+0x9e/0x330 [ 202.282565][ T3269] ? __rcu_read_lock+0x50/0x50 [ 202.287309][ T3269] ? __unwind_start+0x72f/0x8e0 [ 202.292143][ T3269] ? debug_smp_processor_id+0x20/0x20 [ 202.297495][ T3269] ? is_bpf_text_address+0x280/0x2a0 [ 202.302757][ T3269] ? stack_trace_save+0x1f0/0x1f0 [ 202.307759][ T3269] ? __kernel_text_address+0x93/0x100 [ 202.313107][ T3269] ? unwind_get_return_address+0x48/0x80 [ 202.318717][ T3269] ? __rcu_read_lock+0x50/0x50 [ 202.323462][ T3269] ? arch_stack_walk+0xf8/0x140 [ 202.328290][ T3269] ? memset+0x1f/0x40 [ 202.332248][ T3269] ? unwind_next_frame+0x1f0a/0x27b0 [ 202.337509][ T3269] ? arch_stack_walk+0xde/0x140 [ 202.342348][ T3269] ? blkdev_get+0x390/0x390 [ 202.346830][ T3269] ? __rcu_read_lock+0x50/0x50 [ 202.351573][ T3269] ? _raw_spin_unlock+0x49/0x60 [ 202.356402][ T3269] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 202.362446][ T3269] ? mntput_no_expire+0x114/0xbd0 [ 202.367466][ T3269] ? stack_trace_save+0x1f0/0x1f0 [ 202.372471][ T3269] ? check_preemption_disabled+0x9e/0x330 [ 202.378168][ T3269] ? __rcu_read_lock+0x50/0x50 [ 202.382909][ T3269] ? __unwind_start+0x72f/0x8e0 [ 202.387740][ T3269] ? debug_smp_processor_id+0x20/0x20 [ 202.393089][ T3269] ? lo_release+0x1e0/0x1e0 [ 202.397573][ T3269] blkdev_ioctl+0x8f7/0x2ce0 [ 202.402144][ T3269] ? __kernel_text_address+0x93/0x100 [ 202.407494][ T3269] ? unwind_get_return_address+0x48/0x80 [ 202.413104][ T3269] ? __blkdev_driver_ioctl+0xd0/0xd0 [ 202.418372][ T3269] ? arch_stack_walk+0xf8/0x140 [ 202.423214][ T3269] ? __rcu_read_lock+0x50/0x50 [ 202.427959][ T3269] ? check_preemption_disabled+0x154/0x330 [ 202.433744][ T3269] ? avc_has_extended_perms+0x72a/0x1140 [ 202.439354][ T3269] ? avc_has_extended_perms+0xb5e/0x1140 [ 202.444982][ T3269] ? avc_ss_reset+0x3a0/0x3a0 [ 202.449637][ T3269] ? do_sys_open+0x62e/0x7c0 [ 202.454210][ T3269] block_ioctl+0xa8/0xe0 [ 202.458435][ T3269] ? blkdev_iopoll+0xf0/0xf0 [ 202.463004][ T3269] do_vfs_ioctl+0x76a/0x1720 [ 202.467574][ T3269] ? selinux_file_ioctl+0x72f/0x990 [ 202.472750][ T3269] ? ioctl_preallocate+0x250/0x250 [ 202.477842][ T3269] ? __fget+0x37b/0x3c0 [ 202.481978][ T3269] ? fget_many+0x20/0x20 [ 202.486200][ T3269] ? debug_smp_processor_id+0x20/0x20 [ 202.491551][ T3269] ? __x64_sys_pwrite64+0x1d9/0x240 [ 202.496729][ T3269] ? security_file_ioctl+0x9d/0xb0 [ 202.501816][ T3269] __x64_sys_ioctl+0xd4/0x110 [ 202.506471][ T3269] do_syscall_64+0xcb/0x1e0 [ 202.510967][ T3269] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 202.516874][ T3269] RIP: 0033:0x466217 [ 202.520753][ T3269] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 02:54:28 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc9, 0xc9, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0xe6}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 202.540340][ T3269] RSP: 002b:00007fcd89e23f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.548733][ T3269] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000466217 [ 202.556684][ T3269] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 202.564634][ T3269] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 202.572583][ T3269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 202.580532][ T3269] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 02:54:28 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x4000000000000, 0x0, 0x0) 02:54:28 executing program 3 (fault-call:0 fault-nth:12): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:28 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc9, 0xc9, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0xe6}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 202.626095][ T3272] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 202.663113][ T3272] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 202.676507][ T3293] FAULT_INJECTION: forcing a failure. [ 202.676507][ T3293] name failslab, interval 1, probability 0, space 0, times 0 [ 202.693373][ T3293] CPU: 1 PID: 3293 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 202.703535][ T3293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.713579][ T3293] Call Trace: [ 202.716869][ T3293] dump_stack+0x1d8/0x24e [ 202.721232][ T3293] ? devkmsg_release+0x11c/0x11c 02:54:28 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc9, 0xc9, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0xe6}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:28 executing program 4: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_delroute={0x24, 0x19, 0x11, 0xfffffffc, 0x25dfdbfd, {}, [@RTA_PRIORITY={0x8, 0x6, 0x2000000}]}, 0x24}}, 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x0, 0x480500) r2 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file0/file0\x00', 0x0, 0x0) r3 = openat$incfs(r2, &(0x7f00000000c0)='.pending_reads\x00', 0x742d8bd7a950b3e5, 0x140) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000200)=0x7) ioctl$KDSETLED(r2, 0x127a, 0xf83f00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x0) dup(r1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000240)={0x8, 'tunl0\x00', {'tunl0\x00'}}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3e33855d25713e42f93afa3f7f5c63f22a8695f5b8680fdba149031ad96610cbfa823a2add25c4329b96baba915ccb1b5912b2e70c8272d570d255d32c19db318a21510101ec6ba2be8a38454b7e1ff75c3cfd9cd4b5e40567a6df4e4fc5e1dab62b3fb5e2c340836c7b6815dfc7236935d75150f59a2e3b63aea4b5680899c887d3f3eec7e361926e685d700a8766395b7a4ff731d5f10b71233c8ab035f5f34578c4719f860ff1e9969e22c8cdb9b8b8fdde596ebb7d65b8a591db6692133ee8b15e362e06b3a2a96b90826a552f7f29e5362afd0a2944cc7bb8526bb89f9d670cd8fef48fe729ded43aa183", @ANYBLOB="000000000000000080870d03", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) [ 202.726163][ T3293] ? show_regs_print_info+0x12/0x12 [ 202.731444][ T3293] should_fail+0x6f6/0x860 [ 202.735854][ T3293] ? setup_fault_attr+0x3d0/0x3d0 [ 202.740871][ T3293] ? refcount_add_checked+0x50/0x50 [ 202.746059][ T3293] ? mutex_lock+0xa6/0x110 [ 202.750467][ T3293] ? __module_put_and_exit+0x20/0x20 [ 202.755870][ T3293] ? __kthread_create_on_node+0x126/0x410 [ 202.761576][ T3293] should_failslab+0x5/0x20 [ 202.766072][ T3293] kmem_cache_alloc_trace+0x39/0x2b0 [ 202.771352][ T3293] ? loop_set_status_from_info+0x710/0x710 [ 202.777154][ T3293] ? loop_set_status_from_info+0x710/0x710 [ 202.782937][ T3293] __kthread_create_on_node+0x126/0x410 [ 202.790689][ T3293] ? kthread_create_on_node+0x120/0x120 [ 202.796213][ T3293] ? _raw_spin_unlock+0x49/0x60 [ 202.801054][ T3293] ? bd_start_claiming+0x47c/0x590 [ 202.806136][ T3293] ? loop_set_status_from_info+0x710/0x710 [ 202.811929][ T3293] kthread_create_on_node+0xda/0x120 [ 202.817185][ T3293] ? tsk_fork_get_node+0x10/0x10 [ 202.822091][ T3293] ? loop_set_status_from_info+0x2c6/0x710 [ 202.827884][ T3293] ? memcpy+0x38/0x50 [ 202.831837][ T3293] ? memset+0x1f/0x40 [ 202.835789][ T3293] loop_configure+0x7c9/0x1380 [ 202.840525][ T3293] ? preempt_count_add+0x66/0x130 [ 202.845519][ T3293] lo_ioctl+0x820/0x23b0 [ 202.849731][ T3293] ? memset+0x1f/0x40 [ 202.853703][ T3293] ? unwind_next_frame+0x1f0a/0x27b0 [ 202.858957][ T3293] ? lo_release+0x1e0/0x1e0 [ 202.863550][ T3293] ? arch_stack_walk+0xde/0x140 [ 202.868372][ T3293] ? memset+0x1f/0x40 [ 202.872345][ T3293] ? unwind_next_frame+0x1f0a/0x27b0 [ 202.877605][ T3293] ? memset+0x1f/0x40 [ 202.881557][ T3293] ? unwind_next_frame+0x1f0a/0x27b0 [ 202.886812][ T3293] ? arch_stack_walk+0xde/0x140 [ 202.891637][ T3293] ? preempt_count_add+0x66/0x130 [ 202.896632][ T3293] ? unwind_next_frame+0x1f0a/0x27b0 [ 202.901892][ T3293] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 202.907972][ T3293] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 202.913928][ T3293] ? stack_trace_save+0x120/0x1f0 [ 202.918920][ T3293] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 202.924871][ T3293] ? __unwind_start+0x72f/0x8e0 [ 202.929699][ T3293] ? debug_smp_processor_id+0x20/0x20 [ 202.935050][ T3293] ? check_preemption_disabled+0x154/0x330 [ 202.940853][ T3293] ? debug_smp_processor_id+0x20/0x20 [ 202.946215][ T3293] ? check_preemption_disabled+0x154/0x330 [ 202.951990][ T3293] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 202.958027][ T3293] ? debug_smp_processor_id+0x20/0x20 [ 202.963369][ T3293] ? rmqueue+0x49f/0x2370 [ 202.967669][ T3293] ? stack_trace_save+0x1f0/0x1f0 [ 202.972662][ T3293] ? check_preemption_disabled+0x9e/0x330 [ 202.978348][ T3293] ? __rcu_read_lock+0x50/0x50 [ 202.984036][ T3293] ? __unwind_start+0x72f/0x8e0 [ 202.988857][ T3293] ? debug_smp_processor_id+0x20/0x20 [ 202.994217][ T3293] ? is_bpf_text_address+0x280/0x2a0 [ 202.999487][ T3293] ? stack_trace_save+0x1f0/0x1f0 [ 203.004483][ T3293] ? __kernel_text_address+0x93/0x100 [ 203.009823][ T3293] ? unwind_get_return_address+0x48/0x80 [ 203.015425][ T3293] ? __rcu_read_lock+0x50/0x50 [ 203.020164][ T3293] ? arch_stack_walk+0xf8/0x140 [ 203.024990][ T3293] ? memset+0x1f/0x40 [ 203.028943][ T3293] ? unwind_next_frame+0x1f0a/0x27b0 [ 203.034213][ T3293] ? arch_stack_walk+0xde/0x140 [ 203.039052][ T3293] ? blkdev_get+0x390/0x390 [ 203.043531][ T3293] ? __rcu_read_lock+0x50/0x50 [ 203.048265][ T3293] ? _raw_spin_unlock+0x49/0x60 [ 203.053090][ T3293] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 203.059127][ T3293] ? mntput_no_expire+0x114/0xbd0 [ 203.064120][ T3293] ? stack_trace_save+0x1f0/0x1f0 [ 203.069124][ T3293] ? check_preemption_disabled+0x9e/0x330 [ 203.074816][ T3293] ? __rcu_read_lock+0x50/0x50 [ 203.079548][ T3293] ? __unwind_start+0x72f/0x8e0 [ 203.084368][ T3293] ? debug_smp_processor_id+0x20/0x20 [ 203.089731][ T3293] ? lo_release+0x1e0/0x1e0 [ 203.094207][ T3293] blkdev_ioctl+0x8f7/0x2ce0 [ 203.098866][ T3293] ? __kernel_text_address+0x93/0x100 [ 203.104210][ T3293] ? unwind_get_return_address+0x48/0x80 [ 203.109811][ T3293] ? __blkdev_driver_ioctl+0xd0/0xd0 [ 203.115499][ T3293] ? arch_stack_walk+0xf8/0x140 [ 203.120320][ T3293] ? __rcu_read_lock+0x50/0x50 [ 203.125079][ T3293] ? check_preemption_disabled+0x154/0x330 [ 203.130856][ T3293] ? avc_has_extended_perms+0x72a/0x1140 [ 203.136458][ T3293] ? avc_has_extended_perms+0xb5e/0x1140 [ 203.142066][ T3293] ? avc_ss_reset+0x3a0/0x3a0 [ 203.146721][ T3293] ? do_sys_open+0x62e/0x7c0 [ 203.151299][ T3293] block_ioctl+0xa8/0xe0 [ 203.155529][ T3293] ? blkdev_iopoll+0xf0/0xf0 [ 203.160097][ T3293] do_vfs_ioctl+0x76a/0x1720 [ 203.164661][ T3293] ? selinux_file_ioctl+0x72f/0x990 [ 203.169832][ T3293] ? ioctl_preallocate+0x250/0x250 [ 203.174914][ T3293] ? __fget+0x37b/0x3c0 [ 203.179043][ T3293] ? fget_many+0x20/0x20 [ 203.183261][ T3293] ? debug_smp_processor_id+0x20/0x20 [ 203.188626][ T3293] ? __x64_sys_pwrite64+0x1d9/0x240 [ 203.193808][ T3293] ? security_file_ioctl+0x9d/0xb0 [ 203.198914][ T3293] __x64_sys_ioctl+0xd4/0x110 [ 203.203592][ T3293] do_syscall_64+0xcb/0x1e0 [ 203.208091][ T3293] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 203.213971][ T3293] RIP: 0033:0x466217 [ 203.217848][ T3293] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 203.237422][ T3293] RSP: 002b:00007fcd89e23f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.245804][ T3293] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000466217 [ 203.253749][ T3293] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 203.261693][ T3293] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 203.269645][ T3293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 02:54:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x1000) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000140)) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 02:54:29 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x40000000000000, 0x0, 0x0) 02:54:29 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 203.277697][ T3293] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 02:54:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x1000004a}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{0x0}, {&(0x7f0000002200)=""/54, 0x36}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/192, 0xc0}, {&(0x7f0000005b00)=""/4096, 0x1000}, {0x0}, {0x0}], 0x4, &(0x7f0000000780)=""/71, 0x47}}, {{&(0x7f0000001000)=@in={0x2, 0x0, @private}, 0x80, 0x0}, 0x7}], 0x5, 0x10000, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, 0x0, 0x10000, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x8001, 0x3, 0x0, 0x0, 0x3fc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000ff06004a60ebef2c47fe3b04dc8cb2acd37913b1f73ab71d6dc45954a8205787ffff992d4182e0000002fec513d12adb64fe868b17ee10d2d603892ae97f2c182307050491e76079b7e99a6e319aad462f9691ba629a777fb5d0a0583b7ec4e36f08d2fec1de6770338786a729bee41e9ec39b4bc291b928ef9f1b12e68f74ab829bfab4877b07f8112d75f25cfa60b42e5eafe40debd93f5c8843542ce87ccd81b56a7ae49a9d9c05298e5425267d128ce11df000d9fa45e8a8dcbd98d41df16b4ebd66464d1e7f66e11a5463afc56cffa277233a378e5cbdf9d18aa6f823a0eee8e60f2627681200021afcffab6b76713074fa1b737b6dd68457b0b100000000000000e7aab97628569897d804986838614b32e2eb83b4cd080277abb4862824672d7ef659a3c2b217d76be42e495d751d8dde26cecba021e627df1e13015900953b245c3db57fd510dff19516e6456c9560e298785fe0f90e010500722ea99cfcd862f8000000000000b7f91b24204ee5937a5ed2bc800da626604f179b56c1cab48aed63a30000000000000094f6113b17a1a679fea2c9a8f3dc9b0687ced9d170914d7c08ea8a3ffc1b4dc2394b3dc3bfe86452f044183729dd5f4baa63f744982ebd6d1a0036e8231e1e5b2d63d4d30be7a17333424475adeafa2a6ca643ed1be45c869a8b4b69098fd7ad2f8d8b50b1eb282db29052c8463c09d239ee2aa3a97a170f7f3afa435d07b9b5d1be8527b9acdc7dea2c4f5969bae4d8115fb6a7bc72e15045dd1d4654ba4bfffffffffffffffb36cae40f0a25955257cac2fbae73e3b066a59b27df5f96e122534b2cc6c8c298eafff148aefd6cc9e57f68137392f85fd6d5791a8a3c2ac7c6e02662b86b577ceef4dcece7141aa0ff4e0a6dac436b7be3983a7de4c5d2b6a0124ab2cb83d197059dff5229a6001c66ad4ab6fe55a0319ab26e804bf14d636e292912f1d52cffad48cc180c8b082a78496675fb70e50d5184e704d5195a3a487c76145ffde841c0153a5ddbf52a70a63923b5868e5a433969d359a99965f6cbfb7a7916d6b2297fb602e59143a2b2a40bdfb795986feea7021bc1361ad120c45b0f6d561a56fc3bcd51533245ef2905c6fb46ae068575457fe13804b3514b9903b76a1890c0b7f8713c67850fa93536299396e43600005dff234c0fdb4329ea7a412b072b91b220d300002eac42dd451616d6236e86b70100cf767cb2cc8337dc54c2214ce0ed6b8295e7d3703c4155a050fd8df6d31d039c98e6a18d2e92fb414df2782c99a79ee56b3e0133c92605895bd2e12deaf7923c7a2004d534e024fa6f0113fa784062203100000000000000000000000000000000000000000000004d7df6fe3a8dfdc8c09ef0fa6366022fe8d329f25802d7f69eead5873945d9a7e48447ef5fe0c99253b2fc61155cbbaf22a4b4ee42e4a78aba821ab83367443c93d7a8e6c0df2c966a3c3e7ae025a84c1830a0c2ba31c6de62873d0578ec0861ab839f36441c8b09885bd5104632b3ad7de4945b6dc9f51a12f77f9019c38f112d4771a1d06ee1ece6f975fb3a7aa4d84090948905685f7e864bed7417f9256cbf742e546588efa4b169a414c5b514d4d384911d116eabcba50eaa36e63feeb1748c8c77939f85cbc7c470cd4baab5efe145ecb41632a9d3004b01158fea35dd5629e9022585d68a16c7535e251e211e01d1ef0c8604ad8c12a281df04bf13a465e4ce8e0bfba098f3cfd5d5518cbf2742881f828d0a3a77c2a97d94512154f392933daf2cd0da58a8c2eb5737002b26db96d1d53d4b500d9409f68635764369e76dcea08c4fe7c28f529ea340da6351c50db6146d7126feb17a00000000000000000000000000deddd47e8e154c0e7ee38b293c7352b48bf324cee466a4070cb3ea22fdc5cacd6bbe77111921e197257212ed4b3eca34d62f79a5a9255c70f5dcee40ea0a540c95a61f0655be73f3601e5c2df00f8d9dbd0648532c2e8827305b99d7e2810392000e7a7d428693cebd2b9ff0753d4045fb89b122b55f555f20a45aac094aa2a59d24ee621e7245cf0a266e779319cd9694d1e871e6b82c235ffdda0500000000000000b2fef00b623ede0e7add75cde17a08fec2b752ddc3496d8e1f47a6a92630eb0c182f5f679642c206dc4aa30a83dd431f78c14105e498710821b27954967929f510587ddec437442ed0a7ad3d3f165314c11a633a9d769724ca81867af81bdaa315bb075808a4967369c4af336cd79ed049a1335aa93df0d4db62a75a53d96ac3c4630126752cdd371d575ae0be62cf565ba33abc11a554cd7881b56bfa059f"], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x9) 02:54:29 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:29 executing program 3 (fault-call:0 fault-nth:13): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:29 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 203.377758][ T3272] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 203.396543][ T3272] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:29 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 203.471541][ T3323] FAULT_INJECTION: forcing a failure. [ 203.471541][ T3323] name failslab, interval 1, probability 0, space 0, times 0 [ 203.485297][ T3323] CPU: 0 PID: 3323 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 203.495452][ T3323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.505610][ T3323] Call Trace: [ 203.508883][ T3323] dump_stack+0x1d8/0x24e [ 203.513190][ T3323] ? devkmsg_release+0x11c/0x11c [ 203.518124][ T3323] ? show_regs_print_info+0x12/0x12 [ 203.523301][ T3323] ? mutex_lock+0xa6/0x110 [ 203.527709][ T3323] ? mutex_trylock+0xb0/0xb0 [ 203.532271][ T3323] ? idr_get_free+0x740/0x900 [ 203.536923][ T3323] should_fail+0x6f6/0x860 [ 203.541408][ T3323] ? setup_fault_attr+0x3d0/0x3d0 [ 203.546404][ T3323] ? selinux_kernfs_init_security+0x1b2/0x7e0 [ 203.552442][ T3323] ? __kernfs_new_node+0xdb/0x6d0 [ 203.557438][ T3323] should_failslab+0x5/0x20 [ 203.560633][ T22] audit: type=1400 audit(1617418469.292:12): avc: denied { create } for pid=3310 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 203.561919][ T3323] kmem_cache_alloc+0x36/0x290 [ 203.561934][ T3323] __kernfs_new_node+0xdb/0x6d0 [ 203.592305][ T3323] ? kernfs_new_node+0x160/0x160 [ 203.597234][ T3323] ? security_kernfs_init_security+0x9a/0xb0 [ 203.603192][ T3323] ? mutex_lock+0xa6/0x110 [ 203.607581][ T3323] ? mutex_trylock+0xb0/0xb0 [ 203.612142][ T3323] kernfs_new_node+0x95/0x160 [ 203.616792][ T3323] __kernfs_create_file+0x45/0x260 [ 203.621895][ T3323] sysfs_add_file_mode_ns+0x293/0x340 [ 203.627237][ T3323] internal_create_group+0x560/0xf10 [ 203.632495][ T3323] ? rt_mutex_setprio+0xd10/0xd10 [ 203.637488][ T3323] ? try_to_wake_up+0xa69/0x12a0 [ 203.642412][ T3323] ? sysfs_create_group+0x20/0x20 [ 203.647408][ T3323] ? __loop_update_dio+0x23d/0x580 [ 203.652577][ T3323] loop_configure+0xdd7/0x1380 [ 203.657313][ T3323] lo_ioctl+0x820/0x23b0 [ 203.661640][ T3323] ? memset+0x1f/0x40 [ 203.665599][ T3323] ? unwind_next_frame+0x1f0a/0x27b0 [ 203.670867][ T3323] ? lo_release+0x1e0/0x1e0 [ 203.675341][ T3323] ? arch_stack_walk+0xde/0x140 [ 203.680160][ T3323] ? memset+0x1f/0x40 [ 203.684112][ T3323] ? unwind_next_frame+0x1f0a/0x27b0 [ 203.689369][ T3323] ? memset+0x1f/0x40 [ 203.693330][ T3323] ? unwind_next_frame+0x1f0a/0x27b0 [ 203.698586][ T3323] ? arch_stack_walk+0xde/0x140 [ 203.703408][ T3323] ? preempt_count_add+0x66/0x130 [ 203.708401][ T3323] ? unwind_next_frame+0x1f0a/0x27b0 [ 203.713673][ T3323] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 203.719716][ T3323] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 203.725683][ T3323] ? stack_trace_save+0x120/0x1f0 [ 203.730677][ T3323] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 203.736626][ T3323] ? __unwind_start+0x72f/0x8e0 [ 203.741450][ T3323] ? debug_smp_processor_id+0x20/0x20 [ 203.746814][ T3323] ? check_preemption_disabled+0x154/0x330 [ 203.752598][ T3323] ? debug_smp_processor_id+0x20/0x20 [ 203.757939][ T3323] ? check_preemption_disabled+0x9e/0x330 [ 203.763714][ T3323] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 203.769838][ T3323] ? rmqueue+0x49f/0x2370 [ 203.774140][ T3323] ? stack_trace_save+0x1f0/0x1f0 [ 203.779135][ T3323] ? check_preemption_disabled+0x9e/0x330 [ 203.784842][ T3323] ? __rcu_read_lock+0x50/0x50 [ 203.789573][ T3323] ? __unwind_start+0x72f/0x8e0 [ 203.794396][ T3323] ? debug_smp_processor_id+0x20/0x20 [ 203.799748][ T3323] ? is_bpf_text_address+0x280/0x2a0 [ 203.805061][ T3323] ? stack_trace_save+0x1f0/0x1f0 [ 203.810073][ T3323] ? __kernel_text_address+0x93/0x100 [ 203.815486][ T3323] ? unwind_get_return_address+0x48/0x80 [ 203.821112][ T3323] ? __rcu_read_lock+0x50/0x50 [ 203.825863][ T3323] ? arch_stack_walk+0xf8/0x140 [ 203.830686][ T3323] ? memset+0x1f/0x40 [ 203.834644][ T3323] ? unwind_next_frame+0x1f0a/0x27b0 [ 203.840524][ T3323] ? arch_stack_walk+0xde/0x140 [ 203.845350][ T3323] ? blkdev_get+0x390/0x390 [ 203.849948][ T3323] ? __rcu_read_lock+0x50/0x50 [ 203.854716][ T3323] ? _raw_spin_unlock+0x49/0x60 [ 203.859630][ T3323] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 203.865669][ T3323] ? mntput_no_expire+0x114/0xbd0 [ 203.870665][ T3323] ? stack_trace_save+0x1f0/0x1f0 [ 203.875661][ T3323] ? check_preemption_disabled+0x9e/0x330 [ 203.881350][ T3323] ? __rcu_read_lock+0x50/0x50 [ 203.886082][ T3323] ? __unwind_start+0x72f/0x8e0 [ 203.890901][ T3323] ? debug_smp_processor_id+0x20/0x20 [ 203.896243][ T3323] ? lo_release+0x1e0/0x1e0 [ 203.900716][ T3323] blkdev_ioctl+0x8f7/0x2ce0 [ 203.905281][ T3323] ? __kernel_text_address+0x93/0x100 [ 203.910624][ T3323] ? unwind_get_return_address+0x48/0x80 [ 203.916232][ T3323] ? __blkdev_driver_ioctl+0xd0/0xd0 [ 203.921509][ T3323] ? arch_stack_walk+0xf8/0x140 [ 203.926333][ T3323] ? __rcu_read_lock+0x50/0x50 [ 203.931074][ T3323] ? check_preemption_disabled+0x154/0x330 [ 203.936852][ T3323] ? avc_has_extended_perms+0x72a/0x1140 [ 203.942542][ T3323] ? avc_has_extended_perms+0xb5e/0x1140 [ 203.948146][ T3323] ? avc_ss_reset+0x3a0/0x3a0 [ 203.952791][ T3323] ? do_sys_open+0x62e/0x7c0 [ 203.957366][ T3323] block_ioctl+0xa8/0xe0 [ 203.961625][ T3323] ? blkdev_iopoll+0xf0/0xf0 [ 203.966193][ T3323] do_vfs_ioctl+0x76a/0x1720 [ 203.970757][ T3323] ? selinux_file_ioctl+0x72f/0x990 [ 203.975927][ T3323] ? ioctl_preallocate+0x250/0x250 [ 203.981010][ T3323] ? __fget+0x37b/0x3c0 [ 203.986439][ T3323] ? fget_many+0x20/0x20 [ 203.990653][ T3323] ? debug_smp_processor_id+0x20/0x20 [ 203.995995][ T3323] ? __x64_sys_pwrite64+0x1d9/0x240 [ 204.001184][ T3323] ? security_file_ioctl+0x9d/0xb0 [ 204.006268][ T3323] __x64_sys_ioctl+0xd4/0x110 [ 204.010931][ T3323] do_syscall_64+0xcb/0x1e0 [ 204.015407][ T3323] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 204.021271][ T3323] RIP: 0033:0x466217 [ 204.025137][ T3323] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 204.044709][ T3323] RSP: 002b:00007fcd89e23f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 204.053088][ T3323] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000466217 [ 204.061028][ T3323] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 02:54:29 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x80000000000000, 0x0, 0x0) 02:54:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x4, 0x5, 0x3, 0x480, 0x8}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9d7}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(r3, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYBLOB="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"], 0x8) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000180)='./bus\x00', 0x100000161042, 0x10d) ftruncate(r5, 0x10099b8) sendfile(r4, r5, 0x0, 0x8000fffffffe) r6 = open(&(0x7f0000000140)='./bus\x00', 0x140442, 0x150) ftruncate(r6, 0x87fff) [ 204.068988][ T3323] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 204.076960][ T3323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 204.084901][ T3323] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 [ 204.123464][ T3327] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 204.147934][ T3323] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:29 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 204.195102][ T3327] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x4, 0x5, 0x3, 0x480, 0x8}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9d7}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r3 = creat(0x0, 0x1) write$binfmt_script(r3, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYBLOB="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"], 0x8) getpid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000180)='./bus\x00', 0x100000161042, 0x10d) ftruncate(r5, 0x10099b8) sendfile(r4, r5, 0x0, 0x8000fffffffe) r6 = open(&(0x7f0000000140)='./bus\x00', 0x140442, 0x150) ftruncate(r6, 0x87fff) 02:54:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0/file0\x00', &(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000400)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x1000) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000140)) unlink(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x3fd, 0x0) 02:54:30 executing program 3 (fault-call:0 fault-nth:14): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:30 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:30 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x100000000000000, 0x0, 0x0) [ 204.463816][ T3354] FAULT_INJECTION: forcing a failure. [ 204.463816][ T3354] name failslab, interval 1, probability 0, space 0, times 0 [ 204.480528][ T3354] CPU: 0 PID: 3354 Comm: syz-executor.3 Not tainted 5.4.109-syzkaller-00970-g4c158debcf5b #0 [ 204.490690][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.500726][ T3354] Call Trace: [ 204.504020][ T3354] dump_stack+0x1d8/0x24e [ 204.508335][ T3354] ? devkmsg_release+0x11c/0x11c [ 204.513458][ T3354] ? mutex_unlock+0x19/0x40 [ 204.517947][ T3354] ? show_regs_print_info+0x12/0x12 [ 204.523126][ T3354] ? selinux_kernfs_init_security+0x1b2/0x7e0 [ 204.529167][ T3354] should_fail+0x6f6/0x860 [ 204.533574][ T3354] ? setup_fault_attr+0x3d0/0x3d0 [ 204.538571][ T3354] ? _raw_spin_lock+0xa3/0x1b0 [ 204.543306][ T3354] ? __kernfs_new_node+0xdb/0x6d0 [ 204.548307][ T3354] should_failslab+0x5/0x20 [ 204.552784][ T3354] kmem_cache_alloc+0x36/0x290 [ 204.557522][ T3354] __kernfs_new_node+0xdb/0x6d0 [ 204.562344][ T3354] ? mutex_lock+0xa6/0x110 [ 204.566730][ T3354] ? kernfs_new_node+0x160/0x160 [ 204.571653][ T3354] ? security_kernfs_init_security+0x9a/0xb0 [ 204.577611][ T3354] ? kernfs_activate+0x3fc/0x420 [ 204.582532][ T3354] kernfs_new_node+0x95/0x160 [ 204.587192][ T3354] __kernfs_create_file+0x45/0x260 [ 204.592278][ T3354] sysfs_add_file_mode_ns+0x293/0x340 [ 204.597626][ T3354] internal_create_group+0x560/0xf10 [ 204.602894][ T3354] ? rt_mutex_setprio+0xd10/0xd10 [ 204.607891][ T3354] ? try_to_wake_up+0xa69/0x12a0 [ 204.612800][ T3354] ? sysfs_create_group+0x20/0x20 [ 204.617798][ T3354] ? __loop_update_dio+0x23d/0x580 [ 204.622886][ T3354] loop_configure+0xdd7/0x1380 [ 204.627641][ T3354] lo_ioctl+0x820/0x23b0 [ 204.631862][ T3354] ? memset+0x1f/0x40 [ 204.635816][ T3354] ? unwind_next_frame+0x1f0a/0x27b0 [ 204.641071][ T3354] ? lo_release+0x1e0/0x1e0 [ 204.645546][ T3354] ? arch_stack_walk+0xde/0x140 [ 204.650394][ T3354] ? memset+0x1f/0x40 [ 204.654381][ T3354] ? unwind_next_frame+0x1f0a/0x27b0 [ 204.659652][ T3354] ? memset+0x1f/0x40 [ 204.663613][ T3354] ? unwind_next_frame+0x1f0a/0x27b0 [ 204.668886][ T3354] ? check_preemption_disabled+0x9e/0x330 [ 204.674612][ T3354] ? debug_smp_processor_id+0x20/0x20 [ 204.679966][ T3354] ? check_preemption_disabled+0x9e/0x330 [ 204.685657][ T3354] ? check_preemption_disabled+0x9e/0x330 [ 204.691351][ T3354] ? debug_smp_processor_id+0x20/0x20 [ 204.696708][ T3354] ? check_preemption_disabled+0x9e/0x330 [ 204.702535][ T3354] ? debug_smp_processor_id+0x20/0x20 [ 204.707876][ T3354] ? check_preemption_disabled+0x9e/0x330 [ 204.713687][ T3354] ? __perf_event_task_sched_in+0x57c/0x5e0 [ 204.719566][ T3354] ? __rcu_read_lock+0x50/0x50 [ 204.724301][ T3354] ? perf_pmu_sched_task+0x430/0x430 [ 204.729556][ T3354] ? switch_mm_irqs_off+0x72f/0x9a0 [ 204.734726][ T3354] ? debug_smp_processor_id+0x20/0x20 [ 204.740093][ T3354] ? switch_mm+0x100/0x100 [ 204.744500][ T3354] ? _raw_spin_unlock_irq+0x4a/0x60 [ 204.749670][ T3354] ? finish_task_switch+0x130/0x550 [ 204.754838][ T3354] ? __schedule+0x9b8/0x1170 [ 204.759402][ T3354] ? is_mmconf_reserved+0x420/0x420 [ 204.764604][ T3354] ? enqueue_entity+0xa8c/0xd10 [ 204.769447][ T3354] ? psi_task_change+0x924/0xe50 [ 204.774376][ T3354] ? preempt_schedule+0x16b/0x190 [ 204.779371][ T3354] ? schedule_preempt_disabled+0x20/0x20 [ 204.784979][ T3354] ? enqueue_task_fair+0x51b/0xc10 [ 204.790060][ T3354] ? reschedule_interrupt+0xa/0x20 [ 204.795140][ T3354] ? ___preempt_schedule+0x16/0x20 [ 204.800258][ T3354] ? check_preemption_disabled+0x9e/0x330 [ 204.805948][ T3354] ? refcount_sub_and_test_checked+0x1b6/0x290 [ 204.812099][ T3354] ? memset+0x1f/0x40 [ 204.816061][ T3354] ? unwind_next_frame+0x1f0a/0x27b0 [ 204.821314][ T3354] ? arch_stack_walk+0xde/0x140 [ 204.826141][ T3354] ? __perf_event_task_sched_in+0x57c/0x5e0 [ 204.832116][ T3354] ? __rcu_read_lock+0x50/0x50 [ 204.836850][ T3354] ? perf_pmu_sched_task+0x430/0x430 [ 204.842106][ T3354] ? switch_mm_irqs_off+0x72f/0x9a0 [ 204.847276][ T3354] ? debug_smp_processor_id+0x20/0x20 [ 204.852617][ T3354] ? switch_mm+0x100/0x100 [ 204.857026][ T3354] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 204.863062][ T3354] ? _raw_spin_unlock_irq+0x4a/0x60 [ 204.868232][ T3354] ? finish_task_switch+0x130/0x550 [ 204.873400][ T3354] ? stack_trace_save+0x1f0/0x1f0 [ 204.878396][ T3354] ? check_preemption_disabled+0x9e/0x330 [ 204.884093][ T3354] ? __rcu_read_lock+0x50/0x50 [ 204.888950][ T3354] ? check_preemption_disabled+0x9e/0x330 [ 204.894656][ T3354] ? debug_smp_processor_id+0x20/0x20 [ 204.900014][ T3354] ? check_preemption_disabled+0x9e/0x330 [ 204.905727][ T3354] ? debug_smp_processor_id+0x20/0x20 [ 204.911071][ T3354] ? check_preemption_disabled+0x9e/0x330 [ 204.916761][ T3354] ? lo_release+0x1e0/0x1e0 [ 204.921246][ T3354] blkdev_ioctl+0x8f7/0x2ce0 [ 204.925819][ T3354] ? __pv_queued_spin_lock_slowpath+0xa74/0xcc0 [ 204.932043][ T3354] ? __blkdev_driver_ioctl+0xd0/0xd0 [ 204.937299][ T3354] ? __perf_event_task_sched_in+0x57c/0x5e0 [ 204.943176][ T3354] ? __rcu_read_lock+0x50/0x50 [ 204.947916][ T3354] ? perf_pmu_sched_task+0x430/0x430 [ 204.953277][ T3354] ? switch_mm_irqs_off+0x72f/0x9a0 [ 204.958461][ T3354] ? __rcu_read_lock+0x50/0x50 [ 204.963197][ T3354] ? avc_has_extended_perms+0x72a/0x1140 [ 204.968815][ T3354] ? avc_has_extended_perms+0xb5e/0x1140 [ 204.974418][ T3354] ? __schedule+0x9b8/0x1170 [ 204.979099][ T3354] ? debug_smp_processor_id+0x20/0x20 [ 204.984449][ T3354] ? avc_ss_reset+0x3a0/0x3a0 [ 204.989097][ T3354] ? is_mmconf_reserved+0x420/0x420 [ 204.994266][ T3354] ? check_preemption_disabled+0x9e/0x330 [ 204.999957][ T3354] ? preempt_schedule_irq+0xef/0x140 [ 205.005247][ T3354] ? perf_pmu_sched_task+0x430/0x430 [ 205.010511][ T3354] ? switch_mm_irqs_off+0x72f/0x9a0 [ 205.015682][ T3354] block_ioctl+0xa8/0xe0 [ 205.019904][ T3354] ? blkdev_iopoll+0xf0/0xf0 [ 205.024467][ T3354] do_vfs_ioctl+0x76a/0x1720 [ 205.029029][ T3354] ? selinux_file_ioctl+0x72f/0x990 [ 205.034201][ T3354] ? ioctl_preallocate+0x250/0x250 [ 205.039284][ T3354] ? __fget+0x37b/0x3c0 [ 205.043497][ T3354] ? debug_smp_processor_id+0x20/0x20 [ 205.048840][ T3354] ? fget_many+0x20/0x20 [ 205.053054][ T3354] ? __fpregs_load_activate+0x1d7/0x3c0 [ 205.058580][ T3354] ? security_file_ioctl+0x9d/0xb0 [ 205.063665][ T3354] __x64_sys_ioctl+0xd4/0x110 [ 205.068316][ T3354] do_syscall_64+0xcb/0x1e0 [ 205.072790][ T3354] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 205.078655][ T3354] RIP: 0033:0x466217 [ 205.082521][ T3354] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 a4 48 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 205.102098][ T3354] RSP: 002b:00007fcd89e23f48 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 02:54:30 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:30 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:30 executing program 4: prlimit64(0x0, 0x9, &(0x7f0000000240)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffd8a, 0x2, 0x0, 0xfff, 0x9, 0x0, 0x1f}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x7) recvmmsg(r1, &(0x7f0000001380), 0x2, 0x400100a0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0xfffffd82) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x1, 0x0, 0x8, 0x0, 0x1f}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x804}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000080)={0x10, 0xffffffffffffffda}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r4, 0x0) clone(0x42080103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400000, 0x0) fcntl$setpipe(r6, 0x407, 0x48fa) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 205.110494][ T3354] RAX: ffffffffffffffda RBX: 00000000004afb60 RCX: 0000000000466217 [ 205.118555][ T3354] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 205.126518][ T3354] RBP: 0000000000000005 R08: 0000000000000000 R09: ffffffffffffffff [ 205.134461][ T3354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 205.142419][ T3354] R13: 0000000000000004 R14: 0000000020000218 R15: 0000000000000001 02:54:30 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:30 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x200000000000000, 0x0, 0x0) [ 205.178850][ T3354] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 205.231080][ T3373] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 205.334727][ T3373] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:31 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x3c33) write(r0, &(0x7f00000000c0)="2400110012005f0214fffffffffffff8070040000000400000000100e6ff08000d000000", 0x3) 02:54:31 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:31 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x1010, r0, 0xb1cc4000) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast1}}}) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 02:54:31 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x400000000000000, 0x0, 0x0) 02:54:31 executing program 4: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x200000000000000, 0x0, 0x0) 02:54:31 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x11, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:31 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x1010, r0, 0xb1cc4000) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @multicast1}}}) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 02:54:31 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:31 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 205.639511][ T3402] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:31 executing program 0: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x200000000000000, 0x0, 0x0) 02:54:31 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:31 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x700000000000000, 0x0, 0x0) [ 205.686914][ T3409] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 205.721888][ T3409] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r3, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xc0, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x73c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3abe}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x260}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x45}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8804}, 0x4000) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x4}]}, 0x1c}}, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x8d) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x3, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x5) 02:54:31 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c2f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006a40)=[{{&(0x7f0000000000)={0xa, 0x3, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0xc040) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1147542, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) setresuid(0xee00, 0xee00, 0xee00) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r6, 0x208200) sendfile(r2, r3, 0x0, 0x800000000035) [ 205.757569][ T3421] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:31 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 205.802530][ T3421] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 205.803500][ T3409] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 205.834414][ T3409] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x12, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) lsetxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v3={0x3000000, [{0xf6, 0x7fffffff}, {0x29, 0x2}], r1}, 0x18, 0x1) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x33080, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='hfs\x00', 0x16d04b, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x80000, 0x0) lsetxattr$security_capability(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='security.capability\x00', &(0x7f0000000400)=@v3={0x3000000, [{0x2}, {0x6, 0x8}], r1}, 0x18, 0x2) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r2, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x600, 0x0) 02:54:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:31 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x1000000000000000, 0x0, 0x0) 02:54:31 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:31 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') r1 = geteuid() mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x21000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f5c746d6f64653d30303030303030303030303030303029303132831328a9fc6e1b17725f69643d", @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',allow_other,blksize=0x0000000000000a00,max_read=0x0000000080000001,allow_other,blksize=0x0000000000001300,default_permissions,max_read=0x0000000000000000,hash,fowner<', @ANYRESDEC, @ANYBLOB=',dont_hash,subj_role=,,+*/,smackfsfloor=GPL\x00,\x00']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 02:54:31 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 205.942941][ T3446] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 205.960749][ T3453] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. 02:54:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x4, &(0x7f0000000100)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x6c, 0x57}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x41000, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 02:54:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000681000/0x800000)=nil, 0x800000, 0x200000e, 0x40010, r2, 0x22f8a000) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000200)={0x10000023}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2a8088, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}, {@access_client='access=client'}, {@cachetag={'cachetag', 0x3d, 'data_err=ignore'}}, {@afid={'afid', 0x3d, 0x2}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, 'ext4\x00'}}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) r5 = accept$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000400)=0x1c) ftruncate(r5, 0xc3) open(&(0x7f0000000440)='./file0\x00', 0x80, 0xcc) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:31 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x800000008c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0xb1, 0x96f, 0x0, 0x4, 0xc244}, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1}}], 0x1, 0x22, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="30eb2297b18c0a2ada6f46f8341ce63ccdab668e820dabde", 0x18) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d40)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYBLOB="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", @ANYRESOCT=r3]}, 0x1, 0x0, 0x0, 0x844}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x203, 0x100000000, 0x2000002}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a", 0x8c}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d5db497ceaf3e1b11a5d63a2b7035dc69fa701f3b46fe701880800a7d38dccd4b3e8014aa15c96968359533ce2c5ffdd5f0d3297018bd7c025150940cdead92eb1e6bc6ba45eecf067b32425b6000b2f376ef9172426ae7fa97e5a84ef4dc540bbf5dd458ffcb75724135bd32fa04db6d6a75aedda7ab6e8501fc94e209dc3b2525ae24c954255d3247ca9c1b9525ce68179a52a87333aa2b0a8c1baa6ba6160c6d2018e67bac5402d0d89c5f798b8d1a87b0dc3306f546c61724530d9f4b6f0ee68677c7b261de5afa02d708a8ec979791de8f4831cc354ba453bc253e2435207f25494a594d4e5be39902358d362cb318ad965b7e7480a5ca5b6fe74e101c400c77392ee4419ad788f494230487811046f21f0f9665dfbaa9e94ed305a02e3fa47039e67dde19f89c8f1741aad752cdfe458ddf54e8fc10ff79", 0x1b8}], 0x3) sendto$inet(r4, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 02:54:31 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 205.989928][ T3453] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 206.025533][ T3446] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 206.077882][ T3469] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue [ 206.108607][ T3453] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. 02:54:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x22, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:31 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x4000000000000000, 0x0, 0x0) 02:54:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:31 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 206.127507][ T3453] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000681000/0x800000)=nil, 0x800000, 0x200000e, 0x40010, r2, 0x22f8a000) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000200)={0x10000023}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2a8088, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}, {@access_client='access=client'}, {@cachetag={'cachetag', 0x3d, 'data_err=ignore'}}, {@afid={'afid', 0x3d, 0x2}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, 'ext4\x00'}}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) r5 = accept$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000400)=0x1c) ftruncate(r5, 0xc3) open(&(0x7f0000000440)='./file0\x00', 0x80, 0xcc) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:31 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:31 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 206.207146][ T3486] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:32 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x8000000000000000, 0x0, 0x0) [ 206.269660][ T3493] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue [ 206.283994][ T3495] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. 02:54:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000681000/0x800000)=nil, 0x800000, 0x200000e, 0x40010, r2, 0x22f8a000) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000200)={0x10000023}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2a8088, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}, {@access_client='access=client'}, {@cachetag={'cachetag', 0x3d, 'data_err=ignore'}}, {@afid={'afid', 0x3d, 0x2}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, 'ext4\x00'}}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) r5 = accept$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000400)=0x1c) ftruncate(r5, 0xc3) open(&(0x7f0000000440)='./file0\x00', 0x80, 0xcc) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:32 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 206.327128][ T3495] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 206.348096][ T3505] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 206.408424][ T3495] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 206.421435][ T3495] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 206.521828][ T3516] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue 02:54:32 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0xeffdffff00000000, 0x0, 0x0) 02:54:32 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x6, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x25, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:32 executing program 4: fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) mknod(0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = open(&(0x7f0000000200)='./file0/file0\x00', 0x365243, 0x91) sendfile(r1, r1, &(0x7f0000000000), 0x0) getsockopt$inet_int(r1, 0x0, 0x13, 0x0, &(0x7f0000000000)) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/40, 0x28}, {&(0x7f0000000500)=""/161, 0xa1}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x3) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xb) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88300, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x3200c, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0xa) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x750, {}, {0x2, 0x1, @local}, {0x2, 0x4e22, @empty=0xfffffffe}, 0x0, 0x0, 0x2, 0x46a, 0x2004, 0x0, 0xffffffffffffffff, 0x800, 0x3d}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) r3 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r3, 0xfffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x8, 0x80010, r0, 0x19997000) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xbf) unshare(0x60000000) 02:54:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000681000/0x800000)=nil, 0x800000, 0x200000e, 0x40010, r2, 0x22f8a000) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000200)={0x10000023}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2a8088, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}, {@access_client='access=client'}, {@cachetag={'cachetag', 0x3d, 'data_err=ignore'}}, {@afid={'afid', 0x3d, 0x2}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, 'ext4\x00'}}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) r5 = accept$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000400)=0x1c) ftruncate(r5, 0xc3) open(&(0x7f0000000440)='./file0\x00', 0x80, 0xcc) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:32 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 206.940780][ T3533] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 206.964371][ T3529] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 206.975854][ T3531] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue 02:54:32 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 206.988406][ T3533] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:32 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0xf5ffffff00000000, 0x0, 0x0) 02:54:32 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 207.036663][ T3529] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000681000/0x800000)=nil, 0x800000, 0x200000e, 0x40010, r2, 0x22f8a000) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000200)={0x10000023}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2a8088, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}, {@access_client='access=client'}, {@cachetag={'cachetag', 0x3d, 'data_err=ignore'}}, {@afid={'afid', 0x3d, 0x2}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, 'ext4\x00'}}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) r5 = accept$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000400)=0x1c) ftruncate(r5, 0xc3) open(&(0x7f0000000440)='./file0\x00', 0x80, 0xcc) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:32 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x57, 0x200000000010ffd}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x101000, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x100, 0x0) fallocate(r2, 0x12, 0x3, 0x1) r3 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./bus\x00') lseek(r0, 0x0, 0x2) write$vga_arbiter(r1, &(0x7f0000000180)=@target={'target ', {'PCI:', '1d', ':', '3', ':', '4', '.', '0'}}, 0x14) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x6200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendfile(r0, r3, 0x0, 0x40d09) 02:54:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:32 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x110, 0x110, 0x2, [@const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x12a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:32 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0xffffffff00000000, 0x0, 0x0) [ 207.161251][ T3533] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 207.179653][ T3565] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 207.202511][ T3533] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x48, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:33 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x110, 0x110, 0x2, [@const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x12a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:33 executing program 4: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x5, 0x20, 0xac, 0x3f, 0x0, 0xb2, 0x80200, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xcd69, 0x4, @perf_bp={&(0x7f0000000080), 0x6}, 0xc, 0x5, 0x3ff, 0x4, 0x4, 0x37d, 0x2}, 0x0, 0x10, 0xffffffffffffffff, 0x1) [ 207.221015][ T3573] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue 02:54:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000681000/0x800000)=nil, 0x800000, 0x200000e, 0x40010, r2, 0x22f8a000) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000200)={0x10000023}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2a8088, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}, {@access_client='access=client'}, {@cachetag={'cachetag', 0x3d, 'data_err=ignore'}}, {@afid={'afid', 0x3d, 0x2}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, 'ext4\x00'}}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) r5 = accept$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000400)=0x1c) ftruncate(r5, 0xc3) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:33 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x110, 0x110, 0x2, [@const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x12a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:33 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x2) 02:54:33 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, r0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xeb07}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x84}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x258}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd69}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x48001) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280)='NLBL_MGMT\x00', 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x400c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_getnetconf={0x34, 0x52, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x7ff}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x7f}, @NETCONFA_FORWARDING={0x8, 0x2, 0x3}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40080) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000580)='.log\x00', 0x40, 0x14a) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000001640)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001600)={&(0x7f0000000640)={0xf90, r3, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x2c6, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @device_a, @broadcast, @from_mac, {0x7, 0x9}}, @ver_80211n={0x0, 0x7f, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x6, @random=0x400, 0x8541, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x6, [{0x36}, {}, {0x1b}, {0x1b, 0x1}, {0x12}, {0x5}]}, @val={0x3, 0x1, 0x74}, @val={0x4, 0x6, {0x22, 0x8, 0x1f, 0x3f}}, @val={0x6, 0x2}, @val={0x5, 0xea, {0xe4, 0x4c, 0x9, "c0735f910b0c4a497289039dafb955fa56ed63194d937ad2a71ad1d760ad031d7ee72b2ebb95ce548e332c2adf4854ffe13435dc87467fe8effbc5ba94414c3c5acbc6ee09ee4d3155c6be81b3e57dd4b9a65d457ebea7be86a949f117f31b09e3a1284e568481bcad26c29ba7c954fc1a733c4ed6a2ab8b22c4fdacc2a086fb89e048b6f85dabe16b6a89e5e76245a1e11e703b469647eff2a1617f9f383c9ec532b22e0a5106a41a99e8c471d5a8c75bc06e361cb1e3199c4a006d12f3fa894986ff9781c41e09ed33f83279e3d61b109d1e0487cd3b00d6b2b5580cda6a35f99aee1a172fe1"}}, @void, @void, @val={0x3c, 0x4, {0x0, 0x3, 0xc, 0x15}}, @void, @void, @void, @val={0x76, 0x6, {0x1, 0x3, 0x1c, 0x2}}, [{0xdd, 0x97, "39ea1fc2a8704e45fe88633478a20a6479e3ed1f02f3afaa467d9d1e2713461e613d1faad98d93477861efc76a062d753e8e424f42074f8e3e850ff0378c256030c86b207382e73f717c079dfb4795c03e5a6a63513f41303afde4774f8c3d5c27020ca02b2ef81ca9d1c77b73aa1cb69dad58cf4b7abe850928b12c652a89df2269345b60df5fbd722f13f50ee36a50cc00342f125e7b"}, {0xdd, 0x7c, "d9898663049d6c38e81faf335fdf4c74695e0dfb4c1de40842755447aaff8420636cc02f85a6b58695b26d25a8f0dd7969a02a8e3eb99da63595beccbfe2d32847a4fd634e489c813c971958538c6bd5a599884aa01c092ab190615a4d3577c532e4ff1246da8dc0d882cddd01b9c1be60425bc67a52688a484da55e"}, {0xdd, 0x68, "864810ec48124229c6abd13aa97a1b494e495d9287a5512aab869233dd2b4201cd5b45b5ce1f7b09b860e96914dfb03c41a28dd862bbe0f6fe1dfa549facc688c57be8d131241d07be42595e16f9d571863a3f43167a464a74346266eab0ab0127a68021d0ef9b74"}]}}, @NL80211_ATTR_BEACON_HEAD={0x4da, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @random="0f0a3d770f10", {0x4, 0x1}}, @ver_80211n={0x0, 0x4a, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x20, @random=0x3f, 0xcc02, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0xa9}, @val={0x4, 0x6, {0x1, 0xff, 0x8, 0x400}}, @val={0x6, 0x2, 0xfff8}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x94, 0x95, 0x3}}, @val={0x2d, 0x1a, {0x80, 0x1, 0x1, 0x0, {0x3, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x8, 0x4, 0x7f}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x81, 0xff, 0x12, 0xfc8}}, [{0xdd, 0x92, "838e632876ff0b719b5ddbdd963540443a5b8660f0a72b41ff07b746828255c218090e89f59a33d4410cfc43afd53cd072e8ee2453285280f92c178a8fab145c49d97c4fa8cbe9915c9fb0d1305b96c2e7b05738f32f9a6707f5db3b5d2af1d741daa0feb283c433302dba7fcfec153779734ebb5b0494e3e49f216546b4f6992f69ddeb682686670f0c21cada7355855731"}, {0xdd, 0x81, "8d1112496a770bfbdcb1778001e6e5a8069122d418ca0fab146ead3e0a7c00483e62f62db341b0fa276eca6f25481bca33fc7f8013636623574db53197fce63c9d1ebf63acc617eec7290b8e9d6d38e9f8dc60870bfd52eb1b3c33f56836a4dea6ca50e689a0fec3c57960ebfd16edccddd3e5a6c6ca1838102feab2fe7634599a"}, {0xdd, 0x65, "ddb73af3900bb1cb759aca766bee76b6336a1e30322e56e9be8a305ae435a719adeb76d81aaab5f6a47dbcb2cc08b6241f0d99ad0ab29b237608e59adb0ddd09e8f7a4e13a980ed2f714c1060e2b967f224965747671346a57251e7ce91777602762d13696"}, {0xdd, 0x38, "379ded2db9938c9f0f4f6dbc30cebc1f702e3d842d82f2e8cfde028914462b5309c2652e6e5c1eced594431d86aa22b872b71d8bf72e7b67"}, {0xdd, 0x2a, "255e6d7e8f3935fbee759d6c6525d44cb5b7dd6f07300030e9959cd30b8b2117d9d586384c64a73bafb2"}, {0xdd, 0x25, "56504f3cfa728558ebfbd3ad02a2439a355cc48c219414cbf69e2e2d4712a50fc9a7c7b3cc"}, {0xdd, 0x46, "ab01cf98e2d29efa678b35bb1dba7ed6acf20110ef371d080d220448b5d05fc171d7ed55ac4672e1d4415a18625b3b47d8cf107fa1135e5eae5cd13ffcc3053d0c0e9eafa174"}, {0xdd, 0xd2, "b871020ff73529869e7ee5a64da83ae4c58ed9227fd36958580469324f2a9d3768cbe8c939893e78e11ab8afbe58835c6a11a67267a935e65cf1157f3a8db8b69ade18d08d17969bbfd7096ebede9199a10e5e20d72ddcab41b695c8d66414a910f16d0f5eebfc597069a14f2b5ea9227e6ff93b95e7f2def491ff8259810b878b1a01ab500cd8e41c695770fdace02d55fb8b2e5bde6987951bc8c0c4aeb717614b2ced72f2863fd0a4d93f25765b654507d8fbced21f48f6e66d903e40595079a2ef2196e565afc6cc02956153b15eceaf"}, {0xdd, 0x8b, "ec16d3932f9e2eae9bcacf2410cb72c05efd2fa9c0e6310cce7dde272d75559551a47e7dadb74af1f9e8feac2097b95caf0353f9da7c83861b775000f18131faa934a0bbf71901b97c86f11fb81ee5d34a490423cf6f57a9055e085598fe171f2248c8a83bffee57d8056fd2432c50275d4eb3a20ebd1e355eacc64f47e9cb6bb08d9e815ab3164bc7c689"}, {0xdd, 0xad, "f72fa925f06d48c4c05e55865d0f8468de43c8432277ed52b8c78c860bf3b40530888d1e8fcb214a930ef8915af4474bcf68707d0722a197da62e57bbe2fdf10d15aaee72cedc38925de93834c5a7fd2d60f2b643e5d5c9b07bb8d75fb726a65467a5e0c5443e45c0afca3652e9d2f59cc909e1566e0af619f696dded275a78414402050bd0f42e1037b4ef11a1e600b3df71949f80257c38874a703d9a3b34e0a69614742adaaf5caf001c390"}]}}, @NL80211_ATTR_BEACON_HEAD={0x59c, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3f}, @device_b, @broadcast, @random="bb20f2787bb6", {0xb, 0xffa}}, @ver_80211n={0x0, 0x20, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x9, @random=0x6, 0x2808, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0x71, {0x7, 0xc3, 0x2c, "f33c943dc78e30c20c84d5a7feacc76664aff46b6ba6fa2d6c3c01e54366b58c082bf1499edbaad9698331d0371f5e4b499a34ce01d6e0f2aaa8e6d9d803a6b2326553654b4e7d307e581a9cdb96e9ffd00c48e17cae1ddd89a93d291a3a330a4a513d32b58183f25e7220d12527"}}, @val={0x25, 0x3, {0x1, 0x38, 0x85}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x4, 0x1}}, @void, [{0xdd, 0x7f, "04e18828106dc3b14aea603c1ef3e916babb3449ea4eca287115893effd7e3cd8eff7222d88389759e8d9792435b1d7f7dbda016852f912526c870a643ebb511514c18a5a6d1f9052ffcc2fab67353ec6fa2a9709c2e874cfc082330d675ae1e621f39946d441a5671a5d267118144c708ca13ded3308fdad695aa63fde139"}, {0xdd, 0x87, "d238215ea995bcb57638e2527675cb7eb346c2287be9dded22852536d77078ee6c8b82122207c552d032c4908c80a655f9372704037884b42c384376e4de02b00fc4ffd247963ac6bda4611f2f88200cb51be22cf2f23a9322ba5a63d0cfc57a926fe5c460f95fdbf5f31df6b8d049930266f53323df5dd7bf0a87867d06ee6d34b224410ece34"}, {0xdd, 0x53, "19f7aef3e8674f838263d5bfc823133d4f6aa96f78fbcd753a40b33384c3673970cf932932c651c903da19c0a1bbf4989302e1ca0b95d444de4fc894a31a9febb92ee741007a4566460f533a296c2b5f0cc7be"}, {0xdd, 0x49, "3cd0dd76ecfbc77de9c4b5f63d5d499c2c516d5543279450d1e2bdca76c3e4d55814c6d366e902b81836c387d576cabc876068e36b2d6b64b4220048b6266a37ea5941ef95b7eac330"}, {0xdd, 0xf0, "3e0261c18d47355b7ca539958aef910fd926b47556cf171aafab5f5d8c2fdff5a8493168fb5d423051a0b0d7a2548e61ef3cd101886438bfb59c3063ae5ded65ad210cf73013f2d723d31a30001c12bfca9822fba6c6491df9c8c9b317baa0746f0fb5a72f0ee17183d334166848519e3e17f5b53f12142d5bbb378db4860d5ca05da1fbd39912d99a6b97bb913c70be15a070897fd41b8d104eb3c5f25c54104859964fcbd2bdf26465baf07ecd0fd278ec2388a355d30ac09d2589a94a53f5de79f712d6261ea89e5e1150bce99b98c4cb5cbcbe05d4f6cae1b52be3143edb49f38084ebdd4358f88cb2735f5c2178"}, {0xdd, 0xa9, "e3622e3162e89a292d5f6b95533526c913a78688c93b92c00df406ffe9d1a1219b56fb8b50b2ed4a0cfd9c71d5d7e1f0c8532affa6f4854109c18a11192b270903a11dbbebc50e56261085a605d6bbbb84484a8db3a8938a52e9d493c5d526107983b22614dfe825ea63c5ac9e3f70ee1b32ceca4c967e7df5ec5a30855272c0c46c2fe12807bd99f1bac96781265f23aad0213f071f964e5a480ee9dd2b66d8336ab95d73d3fa478c"}, {0xdd, 0x65, "298f5f3373ef75083e6d6d2573d07ae3d11736c7ca02ef13ccc098f558b997c5bdc66153730c25b8a9ca88c038c7f8b4fc645774c5871067d2dc2321788a2db82ec2f692ae86c2e0edb76b9da9c476171fa6558855c9ca2d0bec9ca6515f188b09ba99a108"}, {0xdd, 0x53, "849c1206558d6b33549012b305e485fc74c4020fa9d2a9fd3c461a3d4eecc350cf77463e1cefba66e798bcb648dc1afd668ff73e593f8411e690f6e490640900261930730a4810cd5c2b40f2a5de8a3a236b93"}, {0xdd, 0xd7, "2387d2c737e89dc0b80ea2ba197eafdaf4d586c5f4e544eb49e879f7f6db0a24cb50d9ce83dbbc22af5f32c9b7953c45492a57bdf761ac0f08e0f5a34ffafcb7357397fe385d08475d918146ee2b48a9c16efec1b15ada393893020636213d2d70ee52e1ccdef7d9e360979ff5ae5da10b3504d4bb16938621521464011674bed455555a0652485f9aea013e73deb3b5fbebcece33801183a14ff03c6b30900618875f783ca4532787bc9171a78c241e6eeb03f6dd21445d1db4fd21c29cb09fe06111cd88258a2b032d9bd3d553cc936d42c108a3d7fc"}]}}, @NL80211_ATTR_BEACON_HEAD={0x23c, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_b, @from_mac, {0xc, 0x40}}, @ver_80211n={0x0, 0x7, 0x0, 0x3, 0x0, 0x1}}, 0x2, @default, 0x0, @void, @void, @void, @void, @val={0x6, 0x2, 0x7fff}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x92, 0xb1, 0x80}}, @val={0x2d, 0x1a, {0x400, 0x2, 0x1, 0x0, {0x6, 0x0, 0x0, 0x3f, 0x0, 0x1, 0x1, 0x2}, 0x1, 0x2, 0x1}}, @void, @void, @val={0x76, 0x6, {0x3, 0xd0, 0xb, 0x7}}, [{0xdd, 0xe4, "4dad9b92d50abef54edef94c9c04b89a525dbe34ae71854ed63799494c3c05636e0a6d532c60919993cab6416ab743ae5c23f0fc1a08fbc799eb3ea833f41636fa382028db1878c5d573f6bf175373b237be02e91b8008ce211536b23462681ffe99546c517fd43e933f21a61b7572e568eb86da05b455b42926b58f487941051e5a3431bf261ce1e87d07581ec280a5ad7299c9102c8ae71bb484e2dc25a355f4b8d5917d7c1f5b8e4fdae737c4c5a05eb3f986edd51fea752db252604a52c5a575ef95bbccc1a5b01394f73fb0b9193c821a923d53ac27cda94fd2e7e62c88dddfa819"}, {0xdd, 0x7f, "809f0b71f93ccc6b7337e08aa3d2f373d8c4a152f2e7006e7bddd64fbc2a2a7f9d57b938fdaa37ccbb8bac478694137d9da804d9e41b6b3738acd5fe0e24ebddb6dfdc4f20a8c579aab795922ae59d071ebdb239a244619465f3b941a4fa3ccb977739cc9fba007c3bc1253b4ec3afedcc9168e038801ff74aae8b7fbd03cc"}, {0xdd, 0x10, "5342cc630f7baac124b9c86144c13fdb"}, {0xdd, 0x3e, "5028c94c2c2781f2c4c6f8b3879f051992cb6e969f4ac188a77552be2daa5814b092ab53e446bfa28ba131b06367004e8f44da608e63a4c56e7db51ff822"}, {0xdd, 0x27, "389c4c1d389194aa2ef4fd903618005373c4ce6f9c12ab1f45fa6388815e8f40fcc06bfaf7f08c"}]}}]}, 0xf90}, 0x1, 0x0, 0x0, 0x40005}, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000016c0)='NLBL_MGMT\x00', 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000001780)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x3c, r5, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20044090) sendmsg$nl_route_sched(r2, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)=@newtfilter={0x34, 0x2c, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0xffe0, 0x4}, {0x7, 0xfff1}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x5fa51244835b21bf}, 0x800) syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0)='802.15.4 MAC\x00', r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000001900)={0x6, 'syz_tun\x00', {}, 0x7ff}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001a80)='NLBL_CALIPSO\x00', r4) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c094}, 0x8001) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)={0xac, r3, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x105396a2, 0x50}}}}, [@NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000004) 02:54:33 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:33 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1ab, &(0x7f00000003c0)='bdev!)-%+wlan\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj,q[\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa32)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8G'}, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='ext4_ext_show_extent\x00', r1}, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0xd6, 0x9, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x2, 0x1, 0x3dee}, 0x0, 0xb, 0xffffffffffffffff, 0x0) 02:54:33 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x4) [ 207.351148][ T3565] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 207.369821][ T3601] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 207.385608][ T3601] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 207.461466][ T3620] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 207.479769][ T3601] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 207.495242][ T3604] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue [ 207.499883][ T3601] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4c, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:33 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11d, 0x11d, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x13a}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb5040, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd4e, 0x2, @perf_bp={&(0x7f0000000140), 0x3}, 0x280c, 0x80000000, 0x180000, 0x3, 0x3, 0x7fffffff, 0x9}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x4, 0x4) mmap(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x4, 0x20010, r0, 0x81a7c000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x4d) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x48, &(0x7f00000002c0)) 02:54:33 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x7) 02:54:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x9, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000681000/0x800000)=nil, 0x800000, 0x200000e, 0x40010, r2, 0x22f8a000) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000200)={0x10000023}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2a8088, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}, {@access_client='access=client'}, {@cachetag={'cachetag', 0x3d, 'data_err=ignore'}}, {@afid={'afid', 0x3d, 0x2}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, 'ext4\x00'}}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) accept$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000400)=0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:33 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:33 executing program 4: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) ioctl$CHAR_RAW_ROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x100000001) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000180)="c1c3ad507b9cdd1394f802556675a8760cf7f536b36d0e1e", 0x18) clone(0x40001080, &(0x7f0000000100)="f3a4fa7d731de1dfe5356d39493fd17eb1db2bb66931c27cdb1680b9db3ed3a53c829b1a749f4065685cdcc88dbbcdc35838beeee64c61ee266b6ebbd77878b66ff4ae11235f6afd60563a2ffd8e96b8cbc2a63cb379b4971aa1aa64070aa33f88bfa756aeacff1c1f04e6ab37c8d196b8dd7d", &(0x7f00000000c0), &(0x7f0000001240), &(0x7f0000001480)="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"/4294) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000002c0)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000300)={0xfffffffe, {{0xa, 0x4e20, 0x6, @mcast1, 0x4}}, {{0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, [], 0x1}, 0x31a6e6b4}}}, 0x108) setsockopt$packet_buf(r0, 0x107, 0x9, 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000200)=0x4) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) [ 207.603031][ T3630] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! 02:54:33 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:33 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x10) 02:54:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:33 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 207.648738][ T3631] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 207.672303][ T3632] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue [ 207.723482][ T3644] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 207.736210][ T3644] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x60, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000681000/0x800000)=nil, 0x800000, 0x200000e, 0x40010, r2, 0x22f8a000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0x10000023}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2a8088, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}, {@access_client='access=client'}, {@cachetag={'cachetag', 0x3d, 'data_err=ignore'}}, {@afid={'afid', 0x3d, 0x2}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, 'ext4\x00'}}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:33 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:33 executing program 4: syz_emit_ethernet(0x2e, &(0x7f0000000140)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@deltaction={0x2c, 0x31, 0x7fc4aee50f921820, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40854}, 0x4000040) [ 207.781049][ T3658] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:33 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x700) 02:54:33 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xb, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:33 executing program 4: shutdown(0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x3fffc, 0x0, &(0x7f0000000200), 0x20, &(0x7f00000001c0)={[{@commit={'commit', 0x3d, 0x1a5}}, {@errors_remount='errors=remount-ro'}], [{@uid_eq={'uid', 0x3d, 0xee00}}, {@euid_eq={'euid', 0x3d, r3}}]}) sendfile(r0, r2, 0x0, 0x800000080004103) [ 207.907547][ T3658] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 207.936164][ T3676] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. 02:54:33 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x4000) 02:54:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x9012, r0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x20800, &(0x7f0000000180)={[{@nfs_export_off='nfs_export=off'}, {@metacopy_off='metacopy=off'}, {@xino_on='xino=on'}, {@index_on='index=on'}, {@xino_auto='xino=auto'}, {@xino_auto='xino=auto'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) syz_open_dev$vcsn(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) [ 207.940199][ T3667] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue [ 207.953754][ T3676] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:33 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000681000/0x800000)=nil, 0x800000, 0x200000e, 0x40010, r2, 0x22f8a000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0x10000023}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:33 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x68, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:33 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:33 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x40000) [ 208.051798][ T3692] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:33 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 208.121247][ T3704] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 208.134580][ T3692] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 208.157041][ T3700] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue [ 208.162282][ T3704] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:33 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xc, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000681000/0x800000)=nil, 0x800000, 0x200000e, 0x40010, r2, 0x22f8a000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:33 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:34 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x400000) 02:54:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000681000/0x800000)=nil, 0x800000, 0x200000e, 0x40010, r2, 0x22f8a000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0x10000023}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2a8088, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}, {@access_client='access=client'}, {@cachetag={'cachetag', 0x3d, 'data_err=ignore'}}, {@afid={'afid', 0x3d, 0x2}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, 'ext4\x00'}}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:34 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 208.279099][ T3704] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 208.292057][ T3704] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6c, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:34 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x800000) 02:54:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000681000/0x800000)=nil, 0x800000, 0x200000e, 0x40010, r2, 0x22f8a000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0x10000023}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2a8088, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}, {@access_client='access=client'}, {@cachetag={'cachetag', 0x3d, 'data_err=ignore'}}, {@afid={'afid', 0x3d, 0x2}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, 'ext4\x00'}}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:34 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 208.372734][ T3723] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 208.392471][ T3743] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 208.410087][ T3734] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue 02:54:34 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:34 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x1000000) 02:54:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 208.410797][ T3743] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 208.436188][ T3723] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000681000/0x800000)=nil, 0x800000, 0x200000e, 0x40010, r2, 0x22f8a000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:34 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000681000/0x800000)=nil, 0x800000, 0x200000e, 0x40010, r2, 0x22f8a000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0x10000023}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2a8088, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}, {@access_client='access=client'}, {@cachetag={'cachetag', 0x3d, 'data_err=ignore'}}, {@afid={'afid', 0x3d, 0x2}}, {@cache_fscache='cache=fscache'}, {@cachetag={'cachetag', 0x3d, 'ext4\x00'}}], [{@dont_appraise='dont_appraise'}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:34 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:34 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x2, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 208.504360][ T3743] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 208.517490][ T3743] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x74, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:34 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x2000000) 02:54:34 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r1, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00d\x00\x00'], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) [ 208.586014][ T3767] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:34 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x75, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xe, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000681000/0x800000)=nil, 0x800000, 0x200000e, 0x40010, r2, 0x22f8a000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:34 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 208.652763][ T3767] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 208.653678][ T3788] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 208.679683][ T3772] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue [ 208.690439][ T3788] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:34 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x4000000) [ 208.799525][ T3798] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 208.812441][ T3798] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 208.814870][ T3806] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:34 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x7000000) 02:54:34 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 208.875955][ T3798] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 208.890397][ T3807] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue 02:54:34 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:34 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 208.923144][ T3806] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 208.929244][ T3798] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:34 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:34 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x10000000) [ 209.073993][ T3833] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 209.093796][ T3830] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue [ 209.140132][ T3833] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r1, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB='\x00d\x00\x00'], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 02:54:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7a, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:35 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:35 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x40000000) 02:54:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x11, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:35 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x12, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 209.513485][ T3853] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 209.534512][ T3852] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 209.543322][ T3851] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue 02:54:35 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:35 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0xeffdffff) 02:54:35 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 209.547887][ T3852] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 209.609658][ T3852] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 209.629949][ T3869] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:35 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:35 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0xf5ffffff) [ 209.653030][ T3852] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 209.748534][ T3878] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue [ 209.858562][ T3869] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:36 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180400400000285a3daf66a2ea1909e956"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r0}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x8000) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x1c575) 02:54:36 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7c, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:36 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0xfffffdef) 02:54:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x22, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:36 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:36 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 210.375130][ T3896] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 210.383624][ T3900] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 210.405726][ T3903] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue [ 210.407231][ T3900] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:36 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0xfffffff5) 02:54:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x25, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:36 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 210.557456][ T3900] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 210.589286][ T3925] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 210.594566][ T3921] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue [ 210.600068][ T3900] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = dup(r1) fchdir(r0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = eventfd2(0x8, 0x0) dup(r4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r6) write$P9_RSTATu(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="5b0000007d02000000430007000600000002040000000000000000000000000018440100000001000000ff7f000000000000050b247d2d3a2e0500ce3d06f0196b741a32b65e5d3a2627020039700003003970dd245e087000", @ANYRES32=0xee01, @ANYRES32=r6, @ANYRES32=0xee01], 0x5b) r7 = fsmount(r2, 0x1, 0x4) fcntl$setpipe(r7, 0x407, 0x8) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lchown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 02:54:36 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:36 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:36 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x4000000000000) 02:54:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7d, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) [ 210.770130][ T3925] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2e, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:36 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:36 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1f, @any, 0xfffd, 0x1}, 0xe) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0xf1, 0x40, 0x7c, 0x9}, {0x5, 0x80, 0x6, 0x4}, {0x24, 0x2, 0x16, 0x7}, {0x100, 0x6, 0x79, 0x7}, {0x9, 0x6, 0x7f, 0xffff}, {0x3, 0x9, 0x2, 0x6}, {0x6, 0xf8, 0x1, 0x2}]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f00000000c0)={0x2, 0x9}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x4, @fixed={[], 0x10}, 0x3}, 0xe) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x103200, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000600)) 02:54:36 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x40000000000000) 02:54:36 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:36 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) [ 210.900834][ T3947] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=ignore,,errors=continue [ 210.902564][ T3943] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 210.924273][ T3956] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:36 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r4 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @private1}, @IFLA_GRE_LINK={0x8, 0x1, r8}]}}}]}, 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@ipmr_delroute={0xb8, 0x19, 0x400, 0x70bd27, 0x25dfdbfb, {0x80, 0x0, 0x10, 0x1, 0xfc, 0x0, 0xfd, 0x1, 0xa00}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_METRICS={0x30, 0x8, 0x0, 0x1, "ddc3d0fc229704cf814668ac5dbca268790b83da3297b4bfe3b1b6403a0a9f7eb380562cbc8c104e67f372e3"}, @RTA_SRC={0x8, 0x2, @remote}, @RTA_OIF={0x8, 0x4, r8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_OIF={0x8, 0x7, 0x4}}, @RTA_METRICS={0x37, 0x8, 0x0, 0x1, "197e0878edba7a59b4be9e9aeca85e3c75d0d6229366e44ad0d67ac709fb7d0e5715b14e63c0201583c4c416e37f988f29ed7c"}, @RTA_DST={0x8, 0x1, @local}, @RTA_OIF={0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40080}, 0x4005) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 210.953115][ T3943] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:36 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x80000000000000) 02:54:36 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, &(0x7f00000003c0)) 02:54:36 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x204, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:36 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) gettid() rt_sigqueueinfo(0x0, 0x3c, &(0x7f00000003c0)) [ 211.031543][ T3943] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 211.047936][ T3943] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 211.048277][ T3956] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:36 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x31, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:36 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x100000000000000) 02:54:36 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:36 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x200000000000000) [ 211.173626][ T3996] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 211.178308][ T3995] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 211.197579][ T3995] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:37 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x400000000000000) 02:54:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 211.311210][ T3996] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 211.319344][ T3995] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 211.334543][ T3995] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:37 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x700000000000000) 02:54:37 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x48, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:37 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:37 executing program 4: syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4, 0x482000) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101080, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x74, 0x0, 0x30, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x36}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20001}, 0x4c051) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) 02:54:37 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 211.908372][ T4024] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 211.927078][ T4025] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 211.935774][ T4024] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 211.988693][ T4024] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 212.001651][ T4024] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 212.020838][ T4025] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:39 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) gettid() rt_sigqueueinfo(0x0, 0x3c, &(0x7f00000003c0)) 02:54:39 executing program 4: dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f0000000100000000000000000034757c466f0d27382f0000002000000020000020000000d7f4655fd7", 0x3a, 0x400}], 0x0, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xfff}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000340)={0x103, 0x29, 0x2, {0x5, [{{0x2, 0x0, 0x7}, 0x2, 0xff, 0x7, './file0'}, {{0x4, 0x4, 0x1}, 0x7, 0x1, 0x7, './file0'}, {{0x8, 0x4, 0x6}, 0x8, 0x3f, 0x7, './file0'}, {{0x1, 0x0, 0x2}, 0x10001, 0x2, 0x7, './file0'}, {{0x6, 0x2, 0x7}, 0x5, 0x8, 0x7, './file0'}, {{0x0, 0x4, 0x7}, 0x100000001, 0x4, 0x7, './file0'}, {{0x0, 0x2, 0x8}, 0x4, 0x4, 0x7, './file0'}, {{0x0, 0x4, 0x5}, 0x4, 0x62, 0x7, './file0'}]}}, 0x103) 02:54:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:39 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x1000000000000000) 02:54:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x382, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:39 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4c, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 214.150051][ T4048] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 214.162877][ T4048] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x383, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:39 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:39 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x4000000000000000) 02:54:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) waitid(0x1, 0x0, 0x0, 0x2, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x4, 0x800008000000}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write(0x1, 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x10000}, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x8) getpid() r3 = socket$inet6(0xa, 0x1, 0x0) dup(0xffffffffffffffff) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000180)='./bus\x00', 0x100000169042, 0x11d) ftruncate(r4, 0x10099b8) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = open(&(0x7f0000000080)='./bus\x00', 0x145442, 0x156) ftruncate(r5, 0x87fff) [ 214.190357][ T4054] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 214.231430][ T4066] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 214.244307][ T4066] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:40 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x8000000000000000) [ 214.284260][ T4072] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (8 blocks) [ 214.293781][ T4054] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000040)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x5dba8bc1}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed61000010000000daf4655fdbf4655fdbf4655f000000000000040080000000000008000500000f0a", 0x29, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) [ 214.324868][ T4066] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 214.337829][ T4066] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:42 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) gettid() rt_sigqueueinfo(0x0, 0x3c, &(0x7f00000003c0)) 02:54:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:42 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0xeffdffff00000000) 02:54:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x60, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x38a, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sync() 02:54:42 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {&(0x7f00000000c0)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 217.164429][ T4092] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (8 blocks) [ 217.185176][ T4091] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 217.198611][ T4097] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 217.206754][ T4091] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:42 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0xf5ffffff00000000) [ 217.312183][ T4108] EXT4-fs (loop0): bad geometry: block count 64 exceeds size of device (8 blocks) [ 217.312278][ T4091] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 217.324583][ T4097] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 217.353443][ T4091] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x402, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:43 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40}}}}}]}}]}}, 0x0) r0 = syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f00000000c0)="0031e884be63b7ba241fe43eb40916fc51c2437dfe2d3b66877a507ad848d5f88ffea8c798b47b20abdf6909b3e0221476644d562a5fd7ade24b4e3d618554839ffa0785af49eadbaf5b184a21217ba4ba3115674a98c0ab11c4bb432e30e5f8da570e37486d8099b349441a840d4990504a32bf63b0399f86e73126da408eafbc2b2c934c153d9979dd2180391769491d446064f598fbec957defa4ccbb681ef93bee4943442a32bb018d0beefb9393b577b10b395fe2095d3de688b5a2ee7721c7a3e72217", 0xc6, 0x8}, {&(0x7f00000001c0)="fbb7a9ceb5c812fc7ed9dfad061fad6e168dd2f05ebf05a0f3bf4551ac7c6bb765adead1f3cf964e3c9a40d87c9143c5d4889868bf528721dea7fb3dbb04b3dfff04005e3f32cc379c3e5b67da70988c", 0x50, 0x4}, {&(0x7f0000000240)="15ef133d1bc00fe8e32a2a5f9e5d02e7cd48a88c7be7dd4951acff5eceddd4219a7a6b0e5e8463f0c3023e3ed2baf4d5709935ea0f0bc1faba7f234e078b60f5e444d03b83b1be362223852203f7bb71ee16cb420ca0c38a3cb0f88063467dc38044aaaa071cf1387d066b9a591688dde45a3f7760b742456e0e3cd54be015190de099f2e68caa9b282812132dd8331a72908744e604efc9b0797d4f4f93eecb532bd9cf5a516932db935264", 0xac, 0x100}], 0x1a0000, &(0x7f0000000380)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots='dots'}, {@fat=@nfs='nfs'}, {@fat=@nocase='nocase'}], [{@appraise='appraise'}, {@smackfstransmute={'smackfstransmute', 0x3d, '#$'}}, {@euid_lt={'euid<', 0xee00}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) creat(&(0x7f0000000480)='./file1\x00', 0xc2) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000400)='trusted.overlay.nlink\x00', &(0x7f0000000440)={'U+', 0xbbe}, 0x16, 0x2) 02:54:43 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0xffffffff00000000) 02:54:43 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 217.611163][ T4121] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 217.631043][ T4121] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 217.691646][ T4121] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 217.709821][ T4121] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 217.732038][ T374] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 218.092039][ T374] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 218.262044][ T374] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 218.271110][ T374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.279887][ T374] usb 5-1: Product: syz [ 218.284382][ T374] usb 5-1: Manufacturer: syz [ 218.288956][ T374] usb 5-1: SerialNumber: syz [ 218.312073][ T4117] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 218.536181][ T118] usb 5-1: USB disconnect, device number 6 02:54:45 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f00000003c0)) 02:54:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x68, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:45 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000740)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6d94, 0xb0ac, 0x3, &(0x7f0000000000)={[0x401]}, 0x8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) preadv(r4, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/98, 0x62}, {&(0x7f00000004c0)=""/21, 0x15}, {&(0x7f0000000500)=""/67, 0x43}, {&(0x7f0000000580)=""/41, 0x29}, {&(0x7f00000005c0)=""/196, 0xc4}], 0x5, 0x2, 0x80000001) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000000340)="2b3974674d949492e9d9520c65f0e2b25917ef1c81990308db806976ad7c076abe81eddf889cfd2c0ad45988c569619e188abef9a2ef3748203654941044155ecad0461084208f0993b77b000d652cf83e6154c02f5b8e3b3615914289bc7c6ac14f08337b0011f0dcf464be29af2609bd9940541eda6910f5d446be3763a62018c559dade204da7d88244f77c12c685da", 0x91, 0x4, 0x0, 0x2, r5}]) 02:54:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x406, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:45 executing program 4: ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x0, @private}}) getsockopt(0xffffffffffffffff, 0xfffffffa, 0x4, &(0x7f0000000280)=""/33, &(0x7f00000002c0)=0x21) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000001c0)=0x83, &(0x7f0000000200)=0x4) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000000c0)='M', 0x1}], 0x2) 02:54:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:45 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x6c, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:45 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 220.205324][ T4149] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 220.232870][ T4156] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. 02:54:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000c40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1f, 0x3c, 0x80, 0x3, 0x0, 0xfff, 0x60, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x101, 0x2, @perf_config_ext={0x6, 0x94}, 0x48489, 0x3, 0x1, 0x6, 0x6, 0x5, 0x9}, r1, 0x1f, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0ad476e6c16bfa50f2171400000000000000290000003e0000000000000000000000240000000000000029006c000032000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}}], 0x2, 0x0) 02:54:46 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f00000003c0)) 02:54:46 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}, 0x200) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000540)={{[], 0x3}, {0x1}, 0x18, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000340)="f821d7658a33dd92bd427dd7ce7a6e9bc3bb27e82da6405a9e6fa1e086b9cbe538d78e01328c2b7efd2726fb741e132e09c96bdaa09e7a7cf2749fd91575a5c508d5aa7df37f9868528361342bf887dbb9b865babb01decf101f825fbcbf7bf1bdcf5bf6537556f0", 0x68, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000db000000010000000c9e00000087d3529d393096e75003ae8693df53932d01f89cfb5c2ea5d1be6a80eced18b9c88c7bab822d7c552205691aa883ee43ebfa03bc994b474f06bc5c0df23ce572941db95193179584b34a21cc9a0fc5f750a333454b51f43f94a7a8e72c6a254189defe9d66d93bccc45691a1b1406cb8ac650acc7c4a074064695d1762f09c85d26ac6ccd31a53d4193827f1e24f8bf762f5366e8c4c02694ffd8fbc475c78b5ffe8f86e3000f4ffabd9b156ce1d1c4dd08ad0b68830718f0c95e4d78afaeaa6a2db2db43201e556b0f75bd6ab3e9b1eaa51013440f84b635d87c9af02494ce0081f69d8680000007386c4ec41832a84106d814cbece825b1ee8910fa92a097b2305757f4be5d7f4de68f58dc110dc210f3730690c9298091f75c84c9a113c6f863493a9fd3085275c0c05915818b136e46740b9833697d8a4a6e0298ff31e83b1780af6f780c6ba3012"], 0x14f}) 02:54:46 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000008012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x10, 0xf1, &(0x7f0000000240)="9ae33c06000000000000009d5246d4f3636253383b4b3e90230cdf0301cd07f86de78251c2ffff1f9d09000000e76e21178f0a732df760630000020079ce9a135f563845173b09a0ca09f470b65f7a7dea41be9aed2d77a090d2c44e2b29efbabf27987f2988f67b1d6d5f66c766773e197545e8edbfaa827af10d7a7e8ae607b8b1294b72c94e929138658d5a0d89550bfe95a1dd92150dadd7f019ba713813eb3b0f1587219a3e4567d8e92848a0123d5fe25f7cabbf2f5a0a4a35761d3c8016033d6e3426b6c43a450b768d5f0049058ac5784c50d9bfe4890d57ea196651cfa479d367caca57ac86c91fb9eb3d5f1d") [ 220.255544][ T4156] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 220.283972][ T4169] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 220.380573][ T4173] EXT4-fs error (device loop0): ext4_fill_super:4589: inode #2: comm syz-executor.0: iget: root inode unallocated [ 220.381706][ T4156] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 220.394787][ T4173] EXT4-fs (loop0): get root inode failed [ 220.406348][ T4156] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 220.411806][ T4173] EXT4-fs (loop0): mount failed 02:54:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x74, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 220.425546][ T4169] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x500, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:46 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r4, 0x4f6e, 0x980f, 0x2, &(0x7f0000000000)={[0x4]}, 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000080), &(0x7f0000000140)=0x4) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) [ 220.562818][ T4196] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 220.575789][ T4196] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 220.595812][ T4192] EXT4-fs error (device loop0): ext4_fill_super:4589: inode #2: comm syz-executor.0: iget: root inode unallocated [ 220.596177][ T4193] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 220.618915][ T4192] EXT4-fs (loop0): get root inode failed [ 220.624879][ T4192] EXT4-fs (loop0): mount failed 02:54:46 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f00000009c0)={0x2, 0x0, [0x8, 0x765d, 0x1ff, 0x2], &(0x7f0000000980)}) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2de1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000940)='y\x00', 0x2, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000140)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r8, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@llc={0x1a, 0x311, 0x1, 0x4, 0x13, 0x0, @multicast}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000340)="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", 0xff}, {&(0x7f0000000440)="65c0ea5a5145d542845857e0ceccde8515f4802d56491e37297cd67d56535fab5d6f8d99df0e47ae01ad7f9e45ea883ba9f20c025df45010c7eee313cdd40e82e17dee7d529c741d938acea46dfa2c5b74cad9b8ff54fbd828e80208eaf893df591d8e54ce5431af9eb655025088d837f7a1d34df1bb11ecc04dd39802716fde65c60e4c10f075d0a7ea799a3928861028086e695984a1fffb639290dda3d8b12590752af93613312ff790bd9694aa3a745b66ef899aab4770fe1b26f12ba1b9e46a4f221eaea7df394f4d1675fc97c4612db2e683806f5309d4dce004360848ef8fb9de27b2b30858f4c469d82ab5a3a1c06fc21e771a", 0xf7}, {&(0x7f0000000540)="0b0a7c9fbbe2e658a8d051144c9b62e705c36aa067a0034bfe2d779413e5010e42e7ce7ce4d1f119215f9119ae94edfd609ec6633ace48e46bba37d2da2bd5157b5abe46a5b182d22047bd97c64a049ce8c5113055ce27fa6835ddd411c7a9f678fca419c96d9593eef9c60a9ac850093e5648f3dcabc3e0ddaecc271c47ef5bd5592c7f3ee03fea2f1838", 0x8b}, {&(0x7f0000000600)="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", 0xff}, {&(0x7f00000001c0)="fa1b43b5bbe7d24bed8c0c88171eeeda22af51333d93dc64c26c7ebdb295966bd45d4afc4577fe414d57d027fb488894feba0c1abcb9473c49bc2b235492698233626acc3290a1c4d69a2597d646fd65ed3a301fe826af06b85e36b46db5380d44bd34cb03cc9084d0c2d03623eb74", 0x6f}, {&(0x7f0000000700)="7f18396105e1591db988b5d2e72dfa382ca7f7e9ef8018e59e74ea81abb5be89b08f75d043790e37999b1c5fcba3d2ebbf9b1e00bdbd2762b64b5bec88690fbf931769600d5cfcb035eb39dd6caf405c14786bace7d025e4b28ba11bcb98022b33333562bb3461e4c0b7472362a2b15be70dce2b068e3fcc4e8f9819a463e8a5c3ad5490f98475525df1792fc1a5c54df8e476e71e850bb28f983eab346fc9b861e9663db9f392", 0xa7}, {&(0x7f00000007c0)="d21bbbd6a034dfa602658d459a9f4090845c8c0f677976146adb0bed3a13626aef4b51c6ea46aee9c6809a24eb15e3486a43ee3fdb60e2a8ad727ad1dd0ea17c97ce55dfe211f5e27f5e6bc9e800f338c00ae5285d14a738006b61e900fce6efd6b5e244964084df42e756f3b94bc2ac3be203f90eee34c5a7e97298eb9ecf23237cd5e3746f9371786c3b90bf4cd5a7eab00a4faf17de632335672709bc86a65c4b1551444f47cf8cd58f31de7235d8dad6190d463d19890d85d543d4ed87c2383cb3631ef0e71e0c604ed51f5422e6339d", 0xd2}], 0x7}, 0x0, 0xa9ab15654a806356, 0x1, {0x0, r9}}, 0xfffffff9) 02:54:46 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ 220.661674][ T736] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 220.670124][ T4196] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 220.684863][ T4196] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 220.706384][ T4193] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7a, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x600, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) [ 220.797660][ T4215] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 220.824960][ T4215] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 220.825505][ T4214] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 220.848121][ T4214] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 220.871333][ T4211] EXT4-fs error (device loop0): ext4_fill_super:4589: inode #2: comm syz-executor.0: iget: root inode unallocated [ 220.883696][ T4211] EXT4-fs (loop0): get root inode failed [ 220.889400][ T4211] EXT4-fs (loop0): mount failed 02:54:46 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x7d, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 220.975539][ T4214] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 221.008636][ T4214] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 221.031714][ T736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.051628][ T736] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 221.064987][ T4224] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 221.091636][ T736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.106502][ T736] usb 5-1: config 0 descriptor?? [ 221.157577][ T4224] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 221.582242][ T736] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 221.592628][ T736] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input9 [ 221.674910][ T736] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ OK ] Removed slice system-serial\x2dgetty.slice. [ OK ] Stopped target Timers. [ OK ] Stopped Daily apt upgrade and clean activities. [ OK ] Stopped Daily apt download activities. [ OK ] Stopped target System Time Synchronized. [ OK ] Stopped Daily Cleanup of Temporary Directories. [ OK ] Stopped target Graphical Interface. [ 222.602836][ T12] usb 5-1: USB disconnect, device number 7 [ OK ] Stopped target Multi-User System. Stopping OpenBSD Secure Shell server... Stopping Regular background program processing daemon... Stopping System Logging Service... [ OK ] Stopped target Login Prompts. Stopping Getty on tty4... Stopping Getty on tty5... Stopping Getty on tty1... [ OK ] Stopped getty on tty2-tty6 if dbus and logind are not available. Stopping Getty on tty3... Stopping Getty on tty2... Stopping Getty on tty6... [ OK ] Stopped Regular background program processing daemon. [ OK ] Stopped System Logging Service. [ OK ] Stopped Getty on tty6. [ OK ] Stopped Getty on tty3. [ OK ] Stopped Getty on tty5. [ OK ] Stopped Getty on tty2. [ OK ] Stopped Getty on tty4. [ OK ] Stopped Getty on tty1. [ OK ] Stopped OpenBSD Secure Shell server. [ OK ] Removed slice system-getty.slice. 02:54:49 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x0, &(0x7f00000003c0)) 02:54:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) Stopping Permit User Sessions... [ OK [0[ 223.310397][ T4250] EXT4-fs error (device loop0): ext4_fill_super:4589: inode #2: comm syz-executor.0: iget: root inode unallocated m] Stopped Permi[ 223.323444][ T4250] EXT4-fs (loop0): get root inode failed t User Sessions. [ 223.332463][ T4250] EXT4-fs (loop0): mount failed [ OK ] Stopped target Remote File Systems. [ 223.371407][ T145] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ OK ] Stopped target Basic System. [ OK ] Stopped target Slices. [ OK ] Stopped target Sockets. [ OK ] Closed Syslog Socket. [ OK ] Stopped target Paths. [ OK ] Stopped target System Initialization. [ OK ] Stopped target Encrypted Volumes. [ OK ] Stopped Forward Password Requests to Wall Directory Watch. [ OK ] Stopped Dispatch Password Requests to Console Directory Watch. Stopping Network Time Synchronization... Stopping Update UTMP about System Boot/Shutdown... [ OK ] Stopped target Swap. [ 223.731419][ T145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.742308][ T145] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 223.751343][ T145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.760024][ T145] usb 5-1: config 0 descriptor?? Stopping Load/Save Random Seed... [ OK ] Stopped target Network. Stopping Raise network interfaces... [ OK ] Stopped Network Time Synchronization. 02:54:49 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000008012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x10, 0xf1, &(0x7f0000000240)="9ae33c06000000000000009d5246d4f3636253383b4b3e90230cdf0301cd07f86de78251c2ffff1f9d09000000e76e21178f0a732df760630000020079ce9a135f563845173b09a0ca09f470b65f7a7dea41be9aed2d77a090d2c44e2b29efbabf27987f2988f67b1d6d5f66c766773e197545e8edbfaa827af10d7a7e8ae607b8b1294b72c94e929138658d5a0d89550bfe95a1dd92150dadd7f019ba713813eb3b0f1587219a3e4567d8e92848a0123d5fe25f7cabbf2f5a0a4a35761d3c8016033d6e3426b6c43a450b768d5f0049058ac5784c50d9bfe4890d57ea196651cfa479d367caca57ac86c91fb9eb3d5f1d") 02:54:49 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r0, 0x0) syz_io_uring_setup(0x7086, &(0x7f0000000000)={0x0, 0x270a, 0x0, 0x2, 0x2a0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, r3, &(0x7f00000001c0)={0x1}, r0, 0x3, 0x0, 0x1}, 0x7fffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="50000000320000082bbd7000ff01000800040000e4ff00080004000401000008000400020000000c000200000000000100000008000400030000000c0002000000000001000000000000000000000000304d79529a14ec2b90be1ddc5a061366aba82ce697e1ec811f0b5e9fa25c28c9125f6e8d5e7dc94bbb1eafc13419864bae0349924c0f246818bc5c0f3c67af4bbeb5322f263b4ced51a1b8b25003d49c5552c7438560527dcfc22f9228d8d764208a2d9f0211b25fc7027d66b5fa69a2304b6a7e3340adddc531687e10d7342a7c05"], 0x50}, 0x1, 0x0, 0x0, 0x24004000}, 0x4004004) r7 = syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r7, 0x450c, 0x0, 0x0, 0x0, 0x12000000) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x18}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="585e1101a1ee1367727b745070300000002dea421446a2000000000000f3ad479c615a9186863d0917731a819c543cf8afe91b2f844c222f2bf0b2c7542605fbcd43a36a9f2314d6c203fea992d989e4e1094ceb3bf75f909eb6954a5e5aaa1ba2fc4bfc4adcd8a1b25d448a9df9f9b50cc0b8207a04f8c58fa02b10e25aeb4d4c4dafd5d3e6b203cdec574dd9168134046d07a1ac87472395073675b91f179ddf847eff3e06f881c0f952c219de120520fcffdaab53643f41506639fda1981f06071ae95e9b7b9e3ee3abd5fac525442600"/225], 0x30}}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r10, 0x0, &(0x7f0000000580), 0x0, 0x2062, 0x0, {0x0, r11}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x0, {0x0, r11}}, 0x9) syz_io_uring_submit(r5, 0x0, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0xba, &(0x7f0000000480)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r11}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) 02:54:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x604, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) 02:54:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x204, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) 02:54:49 executing program 5: clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x2, [@datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "db"}, @const, @union={0x0, 0x7, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}]}, @fwd, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}]}, @restrict, @restrict, @typedef, @int]}}, 0x0, 0x146}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() rt_sigqueueinfo(r1, 0x3c, 0x0) 02:54:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) [ OK ] Stopped Load/Save Random Seed. 02:54:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x700, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) [ 223.940528][ T4281] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 223.950998][ T4285] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 223.955021][ T4281] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 223.964662][ T4282] EXT4-fs error (device loop0): ext4_fill_super:4589: inode #2: comm syz-executor.0: iget: root inode unallocated 02:54:49 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x4}, 0xd4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) [ OK [[ 223.986241][ T4282] EXT4-fs (loop0): get root inode failed 0m] Stopped Upda[ 223.992769][ T4282] EXT4-fs (loop0): mount failed te UTMP about System Boot/Shutdown. [ OK ] Stopped Create Volatile Files and Directories. [ 224.021381][ T145] usbhid 5-1:0.0: can't add hid device: -71 [ 224.033568][ T145] usbhid: probe of 5-1:0.0 failed with error -71 02:54:49 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000280)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef0100c83fe5f5dbf4655f000000000000000001000000001000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000080)="020000000300000004", 0x9, 0x1000}, {0x0, 0x0, 0x4200}], 0x0, &(0x7f0000000040)={[{@data_err_ignore='data_err=ignore'}]}) 02:54:49 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@prjquota='prjquota'}]}) [ 224.045478][ T145] usb 5-1: USB disconnect, device number 8 [ 224.076695][ T4285] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. 02:54:49 executing program 2: r0 = syz_io_uring_setup(0x2de7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x10c96bddd6d5c635}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_setup(0x4, &(0x7f0000000040)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) io_submit(r4, 0x2, &(0x7f0000001140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x3}]) sendmsg$nl_route(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd25, 0x25dfdbfb, {0x2, 0x80, 0x10, 0x4, 0x6, 0x0, 0x0, 0x4, 0x10008}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008090}, 0x4000000) io_uring_enter(r0, 0x7abd, 0x0, 0x0, 0x0, 0x0) [ 224.110307][ T4307] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 224.123333][ T4307] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 224.165393][ T4312] EXT4-fs error (device loop0): ext4_fill_super:4589: inode #2: comm syz-executor.0: iget: root inode unallocated [ 224.178754][ T4314] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 224.189863][ T4307] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 224.202720][ T4312] EXT4-fs (loop0): get root inode failed [ 224.208556][ T4312] EXT4-fs (loop0): mount failed [ 224.214191][ T4307] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. 02:54:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x900, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="200000004000000003000000300000000f000000000000000200000002000000026100000080000020000000e2f4655fe2f4655f0100feff53ef010003200000e1f4655f000000000000000001000000000000000b0000000002b424bd9e23fb620e72a852fe", 0x66, 0x400}], 0x0, &(0x7f0000000080)) [ 224.401224][ T145] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 224.421807][ T4325] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 224.434701][ T4325] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 224.479812][ T4325] EXT4-fs warning (device loop1): ext4_fill_super:3770: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 224.507328][ T4325] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 224.761249][ T145] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.772160][ T145] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 224.781202][ T145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.789801][ T145] usb 5-1: config 0 descriptor?? [ OK ] Stopped Raise network interfaces. [ OK ] Stopped Apply Kernel Variables. [ OK ] Stopped target Local File Systems. Unmounting /syzcgroup/unified... [ OK ] Stopped Load Kernel Modules. [ 225.271739][ T145] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 225.281413][ T145] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input10 [ OK ] Unmounted /syzcgroup/unified. [ OK ] Reached target Unmount All Filesystems. [ OK ] Stopped target Local File Systems (Pre). [ 225.364472][ T145] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ OK ] Stopped Create Static Device Nodes in /dev. [ OK ] Stopped Remount Root and Kernel File Systems. [ OK ] Reached target Shutdown. [ 225.520619][ T1] printk: systemd-shutdow: 31 output lines suppressed due to ratelimiting [ 225.644403][ T1] systemd-shutdown[1]: Sending SIGTERM to remaining processes... [ 225.665558][ T22] audit: type=1400 audit(1617418491.395:13): avc: denied { sys_ptrace } for pid=1 comm="systemd-shutdow" capability=19 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 [ 225.688871][ T142] systemd-journald[142]: Received SIGTERM from PID 1 (systemd-shutdow). [ 225.844078][ T12] usb 5-1: USB disconnect, device number 9 [ 226.088786][ T1] systemd-shutdown[1]: Sending SIGKILL to remaining processes... [ 226.105797][ T1] systemd-shutdown[1]: Unmounting file systems. [ 226.112492][ T1] systemd-shutdown[1]: Remounting '/' read-only with options 'seclabel'. [ 226.125779][ T1] EXT4-fs (sda1): re-mounted. Opts: [ 226.135966][ T1] systemd-shutdown[1]: Remounting '/' read-only with options 'seclabel'. [ 226.144645][ T1] EXT4-fs (sda1): re-mounted. Opts: [ 226.149965][ T1] systemd-shutdown[1]: All filesystems unmounted. [ 226.156562][ T1] systemd-shutdown[1]: Deactivating swaps. [ 226.164938][ T1] systemd-shutdown[1]: All swaps deactivated. [ 226.171199][ T1] systemd-shutdown[1]: Detaching loop devices. [ 226.221721][ T1] systemd-shutdown[1]: All loop devices detached. [ 226.286623][ T1] kvm: exiting hardware virtualization [ 226.292994][ T1] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 226.299673][ T1] reboot: Restarting system [ 226.304292][ T1] reboot: machine restart SeaBIOS (version 1.8.2-google) Total RAM Size = 0x0000000200000000 = 8192 MiB CPUs found: 2 Max CPUs supported: 2 SeaBIOS (version 1.8.2-google) Machine UUID a583b344-326a-bc1c-c01b-461c697cb716 found virtio-scsi at 0:3 virtio-scsi vendor='Google' product='PersistentDisk' rev='1' type=0 removable=0 virtio-scsi blksize=512 sectors=4194304 = 2048 MiB drive 0x000f2430: PCHS=0/0/0 translation=lba LCHS=520/128/63 s=4194304 Sending Seabios boot VM event. Booting from Hard Disk 0... early console in extract_kernel input_data: 0x00000000057cc2c9 input_len: 0x0000000002034ee6 output: 0x0000000001000000 output_len: 0x00000000061f4b28 kernel_total_size: 0x0000000006826000 needed_size: 0x0000000006a00000 trampoline_32bit: 0x000000000009d000 Decompressing Linux... Parsing ELF... done. Booting the kernel. [ 0.000000][ T0] Linux version 5.4.109-syzkaller-00970-g4c158debcf5b (syzkaller@syzkaller) (Debian clang version 11.0.1-2, GNU ld (GNU Binutils for Debian) 2.35.1) #0 SMP PREEMPT now [ 0.000000][ T0] Command line: BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native net.ifnames=0 sysctl.kernel.hung_task_all_cpu_backtrace=1 [ 0.000000][ T0] KERNEL supported cpus: [ 0.000000][ T0] Intel GenuineIntel [ 0.000000][ T0] AMD AuthenticAMD [ 0.000000][ T0] x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' [ 0.000000][ T0] x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' [ 0.000000][ T0] x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' [ 0.000000][ T0] x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 [ 0.000000][ T0] x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. [ 0.000000][ T0] BIOS-provided physical RAM map: [ 0.000000][ T0] BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable [ 0.000000][ T0] BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x0000000000100000-0x00000000bfffcfff] usable [ 0.000000][ T0] BIOS-e820: [mem 0x00000000bfffd000-0x00000000bfffffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x00000000fffbc000-0x00000000ffffffff] reserved [ 0.000000][ T0] BIOS-e820: [mem 0x0000000100000000-0x000000023fffffff] usable [ 0.000000][ T0] printk: bootconsole [earlyser0] enabled [ 0.000000][ T0] ERROR: earlyprintk= earlyser already used [ 0.000000][ T0] ERROR: earlyprintk= earlyser already used [ 0.000000][ T0] ERROR: earlyprintk= earlyser already used [ 0.000000][ T0] ********************************************************** [ 0.000000][ T0] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 0.000000][ T0] ** ** [ 0.000000][ T0] ** This system shows unhashed kernel memory addresses ** [ 0.000000][ T0] ** via the console, logs, and other interfaces. This ** [ 0.000000][ T0] ** might reduce the security of your system. ** [ 0.000000][ T0] ** ** [ 0.000000][ T0] ** If you see this message and you are not debugging ** [ 0.000000][ T0] ** the kernel, report this immediately to your system ** [ 0.000000][ T0] ** administrator! ** [ 0.000000][ T0] ** ** [ 0.000000][ T0] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 0.000000][ T0] ********************************************************** [ 0.000000][ T0] Malformed early option 'vsyscall' [ 0.000000][ T0] nopcid: PCID feature disabled [ 0.000000][ T0] Malformed early option 'vsyscall' [ 0.000000][ T0] NX (Execute Disable) protection: active [ 0.000000][ T0] SMBIOS 2.4 present. [ 0.000000][ T0] DMI: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 0.000000][ T0] Hypervisor detected: KVM [ 0.000000][ T0] kvm-clock: Using msrs 4b564d01 and 4b564d00 [ 0.000002][ T0] kvm-clock: cpu 0, msr 6e1b001, primary cpu clock [ 0.000002][ T0] kvm-clock: using sched offset of 2796906909 cycles [ 0.000866][ T0] clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns [ 0.003189][ T0] tsc: Detected 2300.000 MHz processor [ 0.007527][ T0] last_pfn = 0x240000 max_arch_pfn = 0x400000000 [ 0.008583][ T0] x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT [ 0.009585][ T0] last_pfn = 0xbfffd max_arch_pfn = 0x400000000 [ 0.015627][ T0] found SMP MP-table at [mem 0x000f26f0-0x000f26ff] [ 0.016736][ T0] Using GB pages for direct mapping [ 0.018695][ T0] ACPI: Early table checksum verification disabled [ 0.019589][ T0] ACPI: RSDP 0x00000000000F2470 000014 (v00 Google) [ 0.020485][ T0] ACPI: RSDT 0x00000000BFFFFFA0 000038 (v01 Google GOOGRSDT 00000001 GOOG 00000001) [ 0.021738][ T0] ACPI: FACP 0x00000000BFFFF340 0000F4 (v02 Google GOOGFACP 00000001 GOOG 00000001) [ 0.023072][ T0] ACPI: DSDT 0x00000000BFFFDA80 0018BA (v01 Google GOOGDSDT 00000001 GOOG 00000001) [ 0.024349][ T0] ACPI: FACS 0x00000000BFFFDA40 000040 [ 0.025153][ T0] ACPI: FACS 0x00000000BFFFDA40 000040 [ 0.025882][ T0] ACPI: SRAT 0x00000000BFFFFE70 0000C8 (v03 Google GOOGSRAT 00000001 GOOG 00000001) [ 0.027149][ T0] ACPI: APIC 0x00000000BFFFFDC0 000076 (v05 Google GOOGAPIC 00000001 GOOG 00000001) [ 0.028480][ T0] ACPI: SSDT 0x00000000BFFFF440 000980 (v01 Google GOOGSSDT 00000001 GOOG 00000001) [ 0.029970][ T0] ACPI: WAET 0x00000000BFFFFE40 000028 (v01 Google GOOGWAET 00000001 GOOG 00000001) [ 0.032023][ T0] Zone ranges: [ 0.032480][ T0] DMA [mem 0x0000000000001000-0x0000000000ffffff] [ 0.033408][ T0] DMA32 [mem 0x0000000001000000-0x00000000ffffffff] [ 0.034303][ T0] Normal [mem 0x0000000100000000-0x000000023fffffff] [ 0.035204][ T0] Movable zone start for each node [ 0.035836][ T0] Early memory node ranges [ 0.036381][ T0] node 0: [mem 0x0000000000001000-0x000000000009efff] [ 0.037297][ T0] node 0: [mem 0x0000000000100000-0x00000000bfffcfff] [ 0.038222][ T0] node 0: [mem 0x0000000100000000-0x000000023fffffff] [ 0.040572][ T0] Zeroed struct page in unavailable ranges: 101 pages [ 0.040577][ T0] Initmem setup node 0 [mem 0x0000000000001000-0x000000023fffffff] [ 0.621702][ T0] kasan: KernelAddressSanitizer initialized [ 0.623265][ T0] ACPI: PM-Timer IO Port: 0xb008 [ 0.624251][ T0] ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) [ 0.625242][ T0] IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 [ 0.626248][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) [ 0.627317][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) [ 0.628331][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) [ 0.629303][ T0] ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) [ 0.630274][ T0] Using ACPI (MADT) for SMP configuration information [ 0.631155][ T0] smpboot: Allowing 2 CPUs, 0 hotplug CPUs [ 0.631936][ T0] [mem 0xc0000000-0xfffbbfff] available for PCI devices [ 0.632819][ T0] Booting paravirtualized kernel on KVM [ 0.633522][ T0] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 1.872764][ T0] setup_percpu: NR_CPUS:8 nr_cpumask_bits:8 nr_cpu_ids:2 nr_node_ids:1 [ 1.875158][ T0] percpu: Embedded 61 pages/cpu s209048 r8192 d32616 u1048576 [ 1.876247][ T0] kvm-stealtime: cpu 0, msr 1f6e1f240 [ 1.876999][ T0] PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) [ 1.878092][ T0] Built 1 zonelists, mobility grouping on. Total pages: 2064262 [ 1.879201][ T0] Kernel command line: earlyprintk=serial net.ifnames=0 sysctl.kernel.hung_task_all_cpu_backtrace=1 ima_policy=tcb nf-conntrack-ftp.ports=20000 nf-conntrack-tftp.ports=20000 nf-conntrack-sip.ports=20000 nf-conntrack-irc.ports=20000 nf-conntrack-sane.ports=20000 binder.debug_mask=0 rcupdate.rcu_expedited=1 no_hash_pointers root=/dev/sda console=ttyS0 vsyscall=native numa=fake=2 kvm-intel.nested=1 spec_store_bypass_disable=prctl nopcid vivid.n_devs=16 vivid.multiplanar=1,2,1,2,1,2,1,2,1,2,1,2,1,2,1,2 netrom.nr_ndevs=16 rose.rose_ndevs=16 dummy_hcd.num=8 watchdog_thresh=55 workqueue.watchdog_thresh=140 sysctl.net.core.netdev_unregister_timeout_secs=140 BOOT_IMAGE=/vmlinuz root=/dev/sda1 console=ttyS0 earlyprintk=serial vsyscall=native net.ifnames=0 sysctl.kernel.hung_task_all_cpu_backtrace=1 [ 1.892905][ T0] Dentry cache hash table entries: 1048576 (order: 11, 8388608 bytes, linear) [ 1.895993][ T0] Inode-cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) [ 1.897308][ T0] mem auto-init: stack:all(zero), heap alloc:on, heap free:off [ 2.064813][ T0] Memory: 7009588K/8388204K available (57376K kernel code, 6653K rwdata, 18696K rodata, 1956K init, 10288K bss, 1378616K reserved, 0K cma-reserved) [ 2.067230][ T0] random: get_random_u64 called from __kmem_cache_create+0x38/0x6f0 with crng_init=0 [ 2.068644][ T0] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1 [ 2.071927][ T0] rcu: Preemptible hierarchical RCU implementation. [ 2.072838][ T0] rcu: RCU dyntick-idle grace-period acceleration is enabled. [ 2.073816][ T0] rcu: RCU restricting CPUs from NR_CPUS=8 to nr_cpu_ids=2. [ 2.074979][ T0] All grace periods are expedited (rcu_expedited). [ 2.075818][ T0] Tasks RCU enabled. [ 2.076369][ T0] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 2.077496][ T0] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=2 [ 2.081298][ T0] NR_IRQS: 4352, nr_irqs: 440, preallocated irqs: 16 [ 2.082535][ T0] rcu: Offload RCU callbacks from CPUs: (none). [ 2.083596][ T0] random: crng done (trusting CPU's manufacturer) [ 2.084651][ T0] Console: colour dummy device 80x25 [ 2.085370][ T0] printk: console [ttyS0] enabled [ 2.085370][ T0] printk: console [ttyS0] enabled [ 2.086744][ T0] printk: bootconsole [earlyser0] disabled [ 2.086744][ T0] printk: bootconsole [earlyser0] disabled [ 2.088394][ T0] ACPI: Core revision 20190816 [ 2.089501][ T0] APIC: Switch to symmetric I/O mode setup [ 2.090913][ T0] x2apic enabled [ 2.092507][ T0] Switched APIC routing to physical x2apic. [ 2.096664][ T0] ..TIMER: vector=0x30 apic1=0 pin1=0 apic2=-1 pin2=-1 [ 2.097788][ T0] clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x212735223b2, max_idle_ns: 440795277976 ns [ 2.099335][ T0] Calibrating delay loop (skipped) preset value.. 4600.00 BogoMIPS (lpj=23000000) [ 2.109383][ T0] pid_max: default: 32768 minimum: 301 [ 2.110397][ T0] LSM: Security Framework initializing [ 2.111419][ T0] SELinux: Initializing. [ 2.112313][ T0] Mount-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) [ 2.113681][ T0] Mountpoint-cache hash table entries: 16384 (order: 5, 131072 bytes, linear) [ 2.116567][ T0] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024 [ 2.117545][ T0] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4 [ 2.119353][ T0] Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization [ 2.120778][ T0] Spectre V2 : Spectre mitigation: kernel not compiled with retpoline; no mitigation available! [ 2.120816][ T0] Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl [ 2.123562][ T0] MDS: Mitigation: Clear CPU buffers [ 2.124740][ T0] Freeing SMP alternatives memory: 40K [ 2.246495][ T1] smpboot: CPU0: Intel(R) Xeon(R) CPU @ 2.30GHz (family: 0x6, model: 0x3f, stepping: 0x0) [ 2.248654][ T1] Performance Events: unsupported p6 CPU model 63 no PMU driver, software events only. [ 2.249329][ T1] rcu: Hierarchical SRCU implementation. [ 2.249329][ T1] smp: Bringing up secondary CPUs ... [ 2.249329][ T1] x86: Booting SMP configuration: [ 2.249329][ T1] .... node #0, CPUs: #1 [ 0.025790][ T0] kvm-clock: cpu 1, msr 6e1b041, secondary cpu clock [ 2.249329][ T14] kvm-stealtime: cpu 1, msr 1f6f1f240 [ 2.249354][ T1] MDS CPU bug present and SMT on, data leak possible. See https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/mds.html for more details. [ 2.251496][ T1] smp: Brought up 1 node, 2 CPUs [ 2.252374][ T1] smpboot: Max logical packages: 1 [ 2.253100][ T1] smpboot: Total of 2 processors activated (9200.00 BogoMIPS) [ 2.254784][ T1] devtmpfs: initialized [ 2.261705][ T1] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns [ 2.261705][ T1] futex hash table entries: 512 (order: 3, 32768 bytes, linear) [ 2.263977][ T1] NET: Registered protocol family 16 [ 2.266012][ T1] audit: initializing netlink subsys (disabled) [ 2.269411][ T22] audit: type=2000 audit(1617418497.139:1): state=initialized audit_enabled=0 res=1 [ 2.271245][ T1] cpuidle: using governor menu [ 2.272566][ T1] ACPI: bus type PCI registered [ 2.273825][ T1] PCI: Using configuration type 1 for base access [ 2.314121][ T26] cryptomgr_test (26) used greatest stack depth: 29456 bytes left [ 2.314121][ T1] cryptd: max_cpu_qlen set to 1000 [ 2.320024][ T1] ACPI: Added _OSI(Module Device) [ 2.320885][ T1] ACPI: Added _OSI(Processor Device) [ 2.321608][ T1] ACPI: Added _OSI(3.0 _SCP Extensions) [ 2.322429][ T1] ACPI: Added _OSI(Processor Aggregator Device) [ 2.323340][ T1] ACPI: Added _OSI(Linux-Dell-Video) [ 2.324216][ T1] ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) [ 2.329971][ T1] ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) [ 2.386925][ T1] ACPI: 2 ACPI AML tables successfully acquired and loaded [ 2.416383][ T1] ACPI: Interpreter enabled [ 2.417349][ T1] ACPI: (supports S0 S3 S5) [ 2.418072][ T1] ACPI: Using IOAPIC for interrupt routing [ 2.419044][ T1] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug [ 2.422194][ T1] ACPI: Enabled 16 GPEs in block 00 to 0F [ 2.501461][ T1] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) [ 2.502799][ T1] acpi PNP0A03:00: _OSC: OS supports [ASPM ClockPM Segments MSI HPX-Type3] [ 2.504097][ T1] acpi PNP0A03:00: fail to add MMCONFIG information, can't access extended PCI configuration space under this bridge. [ 2.511282][ T1] PCI host bridge to bus 0000:00 [ 2.512037][ T1] pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] [ 2.513248][ T1] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] [ 2.514478][ T1] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] [ 2.515626][ T1] pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfefff window] [ 2.517267][ T1] pci_bus 0000:00: root bus resource [bus 00-ff] [ 2.518378][ T1] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 2.524601][ T1] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 2.547165][ T1] pci 0000:00:01.3: [8086:7113] type 00 class 0x068000 [ 2.564152][ T1] pci 0000:00:01.3: quirk: [io 0xb000-0xb03f] claimed by PIIX4 ACPI [ 2.568246][ T1] pci 0000:00:03.0: [1af4:1004] type 00 class 0x000000 [ 2.575796][ T1] pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc03f] [ 2.580429][ T1] pci 0000:00:03.0: reg 0x14: [mem 0xfe800000-0xfe80007f] [ 2.596849][ T1] pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 [ 2.604928][ T1] pci 0000:00:04.0: reg 0x10: [io 0xc040-0xc07f] [ 2.610512][ T1] pci 0000:00:04.0: reg 0x14: [mem 0xfe801000-0xfe80107f] [ 2.629573][ T1] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 [ 2.641581][ T1] pci 0000:00:05.0: reg 0x10: [mem 0xfe000000-0xfe7fffff] [ 2.667320][ T1] pci 0000:00:06.0: [1af4:1002] type 00 class 0x00ff00 [ 2.675959][ T1] pci 0000:00:06.0: reg 0x10: [io 0xc080-0xc09f] [ 2.697784][ T1] pci 0000:00:07.0: [1af4:1005] type 00 class 0x00ff00 [ 2.705837][ T1] pci 0000:00:07.0: reg 0x10: [io 0xc0a0-0xc0bf] [ 2.711485][ T1] pci 0000:00:07.0: reg 0x14: [mem 0xfe802000-0xfe80203f] [ 2.740437][ T1] ACPI: PCI Interrupt Link [LNKA] (IRQs 5 *10 11) [ 2.744970][ T1] ACPI: PCI Interrupt Link [LNKB] (IRQs 5 *10 11) [ 2.749057][ T1] ACPI: PCI Interrupt Link [LNKC] (IRQs 5 10 *11) [ 2.752170][ T1] ACPI: PCI Interrupt Link [LNKD] (IRQs 5 10 *11) [ 2.754926][ T1] ACPI: PCI Interrupt Link [LNKS] (IRQs *9) [ 2.763147][ T1] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 2.763147][ T1] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 2.763147][ T1] pci 0000:00:05.0: vgaarb: bridge control possible [ 2.763147][ T1] vgaarb: loaded [ 2.769624][ T1] SCSI subsystem initialized [ 2.770731][ T1] ACPI: bus type USB registered [ 2.771633][ T1] usbcore: registered new interface driver usbfs [ 2.772666][ T1] usbcore: registered new interface driver hub [ 2.773622][ T1] usbcore: registered new device driver usb [ 2.775096][ T1] videodev: Linux video capture interface: v2.00 [ 2.776452][ T1] EDAC MC: Ver: 3.0.0 [ 2.777542][ T1] Advanced Linux Sound Architecture Driver Initialized. [ 2.777542][ T1] PCI: Using ACPI for IRQ routing [ 2.777542][ T1] Bluetooth: Core ver 2.22 [ 2.777542][ T1] NET: Registered protocol family 31 [ 2.777542][ T1] Bluetooth: HCI device and connection manager initialized [ 2.777542][ T1] Bluetooth: HCI socket layer initialized [ 2.777542][ T1] Bluetooth: L2CAP socket layer initialized [ 2.778027][ T1] Bluetooth: SCO socket layer initialized [ 2.779484][ T1] nfc: nfc_init: NFC Core ver 0.1 [ 2.780250][ T1] NET: Registered protocol family 39 [ 2.789830][ T1] clocksource: Switched to clocksource kvm-clock [ 2.985610][ T1] VFS: Disk quotas dquot_6.6.0 [ 2.986565][ T1] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) [ 2.987866][ T1] pnp: PnP ACPI init [ 2.998956][ T1] pnp: PnP ACPI: found 7 devices [ 3.020416][ T1] thermal_sys: Registered thermal governor 'step_wise' [ 3.020419][ T1] thermal_sys: Registered thermal governor 'user_space' [ 3.021514][ T1] thermal_sys: Registered thermal governor 'power_allocator' [ 3.027233][ T1] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns [ 3.029904][ T1] pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] [ 3.030914][ T1] pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] [ 3.031914][ T1] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] [ 3.033016][ T1] pci_bus 0000:00: resource 7 [mem 0xc0000000-0xfebfefff window] [ 3.034881][ T1] NET: Registered protocol family 2 [ 3.036645][ T1] tcp_listen_portaddr_hash hash table entries: 4096 (order: 4, 65536 bytes, linear) [ 3.038247][ T1] TCP established hash table entries: 65536 (order: 7, 524288 bytes, linear) [ 3.040726][ T1] TCP bind hash table entries: 65536 (order: 8, 1048576 bytes, linear) [ 3.042337][ T1] TCP: Hash tables configured (established 65536 bind 65536) [ 3.043663][ T1] UDP hash table entries: 4096 (order: 5, 131072 bytes, linear) [ 3.044798][ T1] UDP-Lite hash table entries: 4096 (order: 5, 131072 bytes, linear) [ 3.046214][ T1] NET: Registered protocol family 1 [ 3.047802][ T1] NET: Registered protocol family 44 [ 3.048629][ T1] pci 0000:00:00.0: Limiting direct PCI/PCI transfers [ 3.049715][ T1] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 3.051032][ T1] PCI: CLS 0 bytes, default 64 [ 3.052177][ T1] PCI-DMA: Using software bounce buffering for IO (SWIOTLB) [ 3.053188][ T1] software IO TLB: mapped [mem 0xbbffd000-0xbfffd000] (64MB) [ 3.054676][ T1] RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer [ 3.057417][ T1] kvm: already loaded the other module [ 3.058241][ T1] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x212735223b2, max_idle_ns: 440795277976 ns [ 3.059754][ T1] clocksource: Switched to clocksource tsc [ 3.067032][ T1] Initialise system trusted keyrings [ 3.068225][ T1] workingset: timestamp_bits=46 max_order=21 bucket_order=0 [ 3.102995][ T1] fuse: init (API version 7.31) [ 3.105110][ T1] 9p: Installing v9fs 9p2000 file system support [ 3.122768][ T1] Key type asymmetric registered [ 3.123636][ T1] Asymmetric key parser 'x509' registered [ 3.124516][ T1] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 244) [ 3.125675][ T1] io scheduler mq-deadline registered [ 3.126449][ T1] io scheduler kyber registered [ 3.129780][ T1] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 [ 3.139581][ T1] ACPI: Power Button [PWRF] [ 3.140930][ T1] input: Sleep Button as /devices/LNXSYSTM:00/LNXSLPBN:00/input/input1 [ 3.142555][ T1] ACPI: Sleep Button [SLPF] [ 3.155474][ T1] PCI Interrupt Link [LNKC] enabled at IRQ 11 [ 3.156598][ T1] virtio-pci 0000:00:03.0: virtio_pci: leaving for legacy driver [ 3.169836][ T1] PCI Interrupt Link [LNKD] enabled at IRQ 10 [ 3.170943][ T1] virtio-pci 0000:00:04.0: virtio_pci: leaving for legacy driver [ 3.185392][ T1] PCI Interrupt Link [LNKB] enabled at IRQ 10 [ 3.186468][ T1] virtio-pci 0000:00:06.0: virtio_pci: leaving for legacy driver [ 3.196591][ T1] virtio-pci 0000:00:07.0: virtio_pci: leaving for legacy driver [ 3.201944][ T1] Serial: 8250/16550 driver, 4 ports, IRQ sharing disabled [ 3.224976][ T1] 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A [ 3.249538][ T1] 00:04: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 3.274013][ T1] 00:05: ttyS2 at I/O 0x3e8 (irq = 6, base_baud = 115200) is a 16550A [ 3.298507][ T1] 00:06: ttyS3 at I/O 0x2e8 (irq = 7, base_baud = 115200) is a 16550A [ 3.329298][ T1] brd: module loaded [ 3.361498][ T1] loop: module loaded [ 3.377083][ T1] scsi host0: Virtio SCSI HBA [ 3.421100][ T1] scsi 0:0:1:0: Direct-Access Google PersistentDisk 1 PQ: 0 ANSI: 6 [ 3.540828][ T1] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. [ 3.543044][ T1] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. [ 3.546103][ T90] sd 0:0:1:0: [sda] 4194304 512-byte logical blocks: (2.15 GB/2.00 GiB) [ 3.546309][ T1] libphy: Fixed MDIO Bus: probed [ 3.548232][ T90] sd 0:0:1:0: [sda] 4096-byte physical blocks [ 3.549885][ T1] tun: Universal TUN/TAP device driver, 1.6 [ 3.552383][ T90] sd 0:0:1:0: [sda] Write Protect is off [ 3.557606][ T90] sd 0:0:1:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA [ 3.582443][ T1] e1000: Intel(R) PRO/1000 Network Driver - version 7.3.21-k8-NAPI [ 3.584558][ T1] e1000: Copyright (c) 1999-2006 Intel Corporation. [ 3.586529][ T1] PPP generic driver version 2.4.2 [ 3.588318][ T1] PPP BSD Compression module registered [ 3.589617][ T1] PPP Deflate Compression module registered [ 3.590913][ T1] PPP MPPE Compression module registered [ 3.592141][ T1] NET: Registered protocol family 24 [ 3.592180][ T90] sda: sda1 [ 3.593478][ T1] PPTP driver version 0.8.5 [ 3.596876][ T1] usbcore: registered new interface driver rtl8150 [ 3.598596][ T1] usbcore: registered new interface driver r8152 [ 3.600334][ T1] usbcore: registered new interface driver asix [ 3.601844][ T1] usbcore: registered new interface driver ax88179_178a [ 3.603640][ T1] usbcore: registered new interface driver cdc_ether [ 3.605180][ T90] sd 0:0:1:0: [sda] Attached SCSI disk [ 3.605250][ T1] usbcore: registered new interface driver cdc_eem [ 3.608198][ T1] usbcore: registered new interface driver dm9601 [ 3.609688][ T1] usbcore: registered new interface driver sr9700 [ 3.611417][ T1] usbcore: registered new interface driver CoreChips [ 3.613016][ T1] usbcore: registered new interface driver smsc75xx [ 3.614592][ T1] usbcore: registered new interface driver smsc95xx [ 3.616112][ T1] usbcore: registered new interface driver gl620a [ 3.617734][ T1] usbcore: registered new interface driver net1080 [ 3.619457][ T1] usbcore: registered new interface driver plusb [ 3.620898][ T1] usbcore: registered new interface driver rndis_host [ 3.622534][ T1] usbcore: registered new interface driver cdc_subset [ 3.624032][ T1] usbcore: registered new interface driver zaurus [ 3.625710][ T1] usbcore: registered new interface driver MOSCHIP usb-ethernet driver [ 3.627877][ T1] usbcore: registered new interface driver ipheth [ 3.629559][ T1] usbcore: registered new interface driver cdc_ncm [ 3.631241][ T1] usbcore: registered new interface driver cdc_mbim [ 3.634552][ T1] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver [ 3.636387][ T1] ehci-pci: EHCI PCI platform driver [ 3.637845][ T1] ehci-platform: EHCI generic platform driver [ 3.639515][ T1] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver [ 3.641160][ T1] ohci-pci: OHCI PCI platform driver [ 3.642654][ T1] ohci-platform: OHCI generic platform driver [ 3.644323][ T1] usbcore: registered new interface driver cdc_acm [ 3.645753][ T1] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters [ 3.647889][ T1] usbcore: registered new interface driver usblp [ 3.649485][ T1] usbcore: registered new interface driver cdc_wdm [ 3.651199][ T1] usbcore: registered new interface driver uas [ 3.652703][ T1] usbcore: registered new interface driver usb-storage [ 3.654357][ T1] usbcore: registered new interface driver ums-alauda [ 3.656176][ T1] usbcore: registered new interface driver ums-cypress [ 3.657715][ T1] usbcore: registered new interface driver ums-datafab [ 3.659442][ T1] usbcore: registered new interface driver ums-freecom [ 3.660852][ T1] usbcore: registered new interface driver ums-isd200 [ 3.662538][ T1] usbcore: registered new interface driver ums-jumpshot [ 3.664236][ T1] usbcore: registered new interface driver ums-karma [ 3.665578][ T1] usbcore: registered new interface driver ums-onetouch [ 3.667179][ T1] usbcore: registered new interface driver ums-sddr09 [ 3.668717][ T1] usbcore: registered new interface driver ums-sddr55 [ 3.670394][ T1] usbcore: registered new interface driver ums-usbat [ 3.672052][ T1] usbcore: registered new interface driver usbserial_generic [ 3.673947][ T1] usbserial: USB Serial support registered for generic [ 3.675542][ T1] usbcore: registered new interface driver ftdi_sio [ 3.677070][ T1] usbserial: USB Serial support registered for FTDI USB Serial Device [ 3.679223][ T1] usbcore: registered new interface driver pl2303 [ 3.680917][ T1] usbserial: USB Serial support registered for pl2303 [ 3.682641][ T1] usbcore: registered new interface driver usb_ehset_test [ 3.684554][ T1] usbcore: registered new interface driver trancevibrator [ 3.686532][ T1] usbcore: registered new interface driver lvs [ 3.688882][ T1] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 3.690898][ T1] dummy_hcd dummy_hcd.0: Dummy host controller [ 3.692746][ T1] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 3.695134][ T1] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.04 [ 3.696952][ T1] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 3.698978][ T1] usb usb1: Product: Dummy host controller [ 3.700589][ T1] usb usb1: Manufacturer: Linux 5.4.109-syzkaller-00970-g4c158debcf5b dummy_hcd [ 3.702999][ T1] usb usb1: SerialNumber: dummy_hcd.0 [ 3.705428][ T1] hub 1-0:1.0: USB hub found [ 3.706457][ T1] hub 1-0:1.0: 1 port detected [ 3.708696][ T1] dummy_hcd dummy_hcd.1: USB Host+Gadget Emulator, driver 02 May 2005 [ 3.710646][ T1] dummy_hcd dummy_hcd.1: Dummy host controller [ 3.712412][ T1] dummy_hcd dummy_hcd.1: new USB bus registered, assigned bus number 2 [ 3.714895][ T1] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.04 [ 3.716810][ T1] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 3.718768][ T1] usb usb2: Product: Dummy host controller [ 3.720169][ T1] usb usb2: Manufacturer: Linux 5.4.109-syzkaller-00970-g4c158debcf5b dummy_hcd [ 3.722165][ T1] usb usb2: SerialNumber: dummy_hcd.1 [ 3.724699][ T1] hub 2-0:1.0: USB hub found [ 3.725766][ T1] hub 2-0:1.0: 1 port detected [ 3.728061][ T1] dummy_hcd dummy_hcd.2: USB Host+Gadget Emulator, driver 02 May 2005 [ 3.730170][ T1] dummy_hcd dummy_hcd.2: Dummy host controller [ 3.732226][ T1] dummy_hcd dummy_hcd.2: new USB bus registered, assigned bus number 3 [ 3.734861][ T1] usb usb3: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.04 [ 3.737192][ T1] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 3.738973][ T1] usb usb3: Product: Dummy host controller [ 3.740405][ T1] usb usb3: Manufacturer: Linux 5.4.109-syzkaller-00970-g4c158debcf5b dummy_hcd [ 3.742473][ T1] usb usb3: SerialNumber: dummy_hcd.2 [ 3.744984][ T1] hub 3-0:1.0: USB hub found [ 3.746313][ T1] hub 3-0:1.0: 1 port detected [ 3.749475][ T1] dummy_hcd dummy_hcd.3: USB Host+Gadget Emulator, driver 02 May 2005 [ 3.751619][ T1] dummy_hcd dummy_hcd.3: Dummy host controller [ 3.753680][ T1] dummy_hcd dummy_hcd.3: new USB bus registered, assigned bus number 4 [ 3.756416][ T1] usb usb4: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.04 [ 3.758610][ T1] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 3.760615][ T1] usb usb4: Product: Dummy host controller [ 3.761736][ T1] usb usb4: Manufacturer: Linux 5.4.109-syzkaller-00970-g4c158debcf5b dummy_hcd [ 3.763757][ T1] usb usb4: SerialNumber: dummy_hcd.3 [ 3.766031][ T1] hub 4-0:1.0: USB hub found [ 3.767297][ T1] hub 4-0:1.0: 1 port detected [ 3.769727][ T1] dummy_hcd dummy_hcd.4: USB Host+Gadget Emulator, driver 02 May 2005 [ 3.771819][ T1] dummy_hcd dummy_hcd.4: Dummy host controller [ 3.773714][ T1] dummy_hcd dummy_hcd.4: new USB bus registered, assigned bus number 5 [ 3.776107][ T1] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.04 [ 3.778350][ T1] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 3.780316][ T1] usb usb5: Product: Dummy host controller [ 3.781625][ T1] usb usb5: Manufacturer: Linux 5.4.109-syzkaller-00970-g4c158debcf5b dummy_hcd [ 3.783915][ T1] usb usb5: SerialNumber: dummy_hcd.4 [ 3.786273][ T1] hub 5-0:1.0: USB hub found [ 3.787525][ T1] hub 5-0:1.0: 1 port detected [ 3.789856][ T1] dummy_hcd dummy_hcd.5: USB Host+Gadget Emulator, driver 02 May 2005 [ 3.792017][ T1] dummy_hcd dummy_hcd.5: Dummy host controller [ 3.793996][ T1] dummy_hcd dummy_hcd.5: new USB bus registered, assigned bus number 6 [ 3.796755][ T1] usb usb6: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.04 [ 3.799097][ T1] usb usb6: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 3.801186][ T1] usb usb6: Product: Dummy host controller [ 3.802430][ T1] usb usb6: Manufacturer: Linux 5.4.109-syzkaller-00970-g4c158debcf5b dummy_hcd [ 3.804673][ T1] usb usb6: SerialNumber: dummy_hcd.5 [ 3.806912][ T1] hub 6-0:1.0: USB hub found [ 3.808079][ T1] hub 6-0:1.0: 1 port detected [ 3.810426][ T1] dummy_hcd dummy_hcd.6: USB Host+Gadget Emulator, driver 02 May 2005 [ 3.812393][ T1] dummy_hcd dummy_hcd.6: Dummy host controller [ 3.814448][ T1] dummy_hcd dummy_hcd.6: new USB bus registered, assigned bus number 7 [ 3.817055][ T1] usb usb7: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.04 [ 3.819223][ T1] usb usb7: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 3.821319][ T1] usb usb7: Product: Dummy host controller [ 3.822764][ T1] usb usb7: Manufacturer: Linux 5.4.109-syzkaller-00970-g4c158debcf5b dummy_hcd [ 3.825071][ T1] usb usb7: SerialNumber: dummy_hcd.6 [ 3.827486][ T1] hub 7-0:1.0: USB hub found [ 3.828817][ T1] hub 7-0:1.0: 1 port detected [ 3.831296][ T1] dummy_hcd dummy_hcd.7: USB Host+Gadget Emulator, driver 02 May 2005 [ 3.833313][ T1] dummy_hcd dummy_hcd.7: Dummy host controller [ 3.835080][ T1] dummy_hcd dummy_hcd.7: new USB bus registered, assigned bus number 8 [ 3.837309][ T1] usb usb8: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.04 [ 3.839602][ T1] usb usb8: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 3.841477][ T1] usb usb8: Product: Dummy host controller [ 3.842802][ T1] usb usb8: Manufacturer: Linux 5.4.109-syzkaller-00970-g4c158debcf5b dummy_hcd [ 3.844852][ T1] usb usb8: SerialNumber: dummy_hcd.7 [ 3.847376][ T1] hub 8-0:1.0: USB hub found [ 3.848559][ T1] hub 8-0:1.0: 1 port detected [ 3.855394][ T1] i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 [ 3.857917][ T1] i8042: Warning: Keylock active [ 3.860295][ T1] serio: i8042 KBD port at 0x60,0x64 irq 1 [ 3.861930][ T1] serio: i8042 AUX port at 0x60,0x64 irq 12 [ 3.864411][ T1] usbcore: registered new interface driver xpad [ 3.866080][ T1] usbcore: registered new interface driver usb_acecad [ 3.868032][ T1] usbcore: registered new interface driver aiptek [ 3.869783][ T1] usbcore: registered new interface driver gtco [ 3.871309][ T1] usbcore: registered new interface driver hanwang [ 3.872947][ T1] usbcore: registered new interface driver kbtab [ 3.875469][ T1] rtc_cmos 00:00: RTC can wake from S4 [ 3.878407][ T1] rtc_cmos 00:00: registered as rtc0 [ 3.879870][ T1] rtc_cmos 00:00: setting system clock to 2021-04-03T02:54:58 UTC (1617418498) [ 3.882271][ T1] rtc_cmos 00:00: alarms up to one day, 114 bytes nvram [ 3.884255][ T1] usbcore: registered new interface driver uvcvideo [ 3.885762][ T1] USB Video Class driver (1.1.1) [ 3.886778][ T1] gspca_main: v2.14.0 registered [ 3.888168][ T1] device-mapper: uevent: version 1.0.3 [ 3.890450][ T1] device-mapper: ioctl: 4.41.0-ioctl (2019-09-16) initialised: dm-devel@redhat.com [ 3.893169][ T1] device-mapper: verity-avb: AVB error handler initialized with vbmeta device: [ 3.895309][ T1] Bluetooth: HCI UART driver ver 2.3 [ 3.896589][ T1] Bluetooth: HCI UART protocol H4 registered [ 3.898107][ T1] Bluetooth: HCI UART protocol LL registered [ 3.899625][ T1] Bluetooth: HCI UART protocol QCA registered [ 3.901178][ T1] intel_pstate: CPU model not supported [ 3.902589][ T1] sdhci: Secure Digital Host Controller Interface driver [ 3.904179][ T1] sdhci: Copyright(c) Pierre Ossman [ 3.905335][ T1] sdhci-pltfm: SDHCI platform and OF driver helper [ 3.906993][ T1] hidraw: raw HID events driver (C) Jiri Kosina [ 3.916715][ T1] usbcore: registered new interface driver usbhid [ 3.918408][ T1] usbhid: USB HID core driver [ 3.920814][ T1] ashmem: initialized [ 3.922113][ T1] gnss: GNSS driver registered with major 236 [ 3.924216][ T1] usbcore: registered new interface driver snd-usb-audio [ 3.926642][ T1] u32 classifier [ 3.927502][ T1] input device check on [ 3.928534][ T1] Actions configured [ 3.930612][ T1] nf_conntrack_irc: failed to register helpers [ 3.932184][ T1] nf_conntrack_sane: failed to register helpers [ 3.935513][ T1] xt_time: kernel timezone is -0000 [ 3.936976][ T1] ipip: IPv4 and MPLS over IPv4 tunneling driver [ 3.939658][ T1] gre: GRE over IPv4 demultiplexor driver [ 3.941032][ T1] ip_gre: GRE over IPv4 tunneling driver [ 3.945842][ T1] IPv4 over IPsec tunneling driver [ 3.948892][ T1] Initializing XFRM netlink socket [ 3.950290][ T1] IPsec XFRM device driver [ 3.953018][ T1] NET: Registered protocol family 10 [ 3.957768][ T1] Segment Routing with IPv6 [ 3.959410][ T1] mip6: Mobile IPv6 [ 3.962229][ T1] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver [ 3.972926][ T1] ip6_gre: GRE over IPv6 tunneling driver [ 3.975565][ T1] NET: Registered protocol family 17 [ 3.976950][ T1] NET: Registered protocol family 15 [ 3.978860][ T1] Bluetooth: RFCOMM TTY layer initialized [ 3.980463][ T1] Bluetooth: RFCOMM socket layer initialized [ 3.982034][ T1] Bluetooth: RFCOMM ver 1.11 [ 3.983125][ T1] Bluetooth: HIDP (Human Interface Emulation) ver 1.2 [ 3.984788][ T1] Bluetooth: HIDP socket layer initialized [ 3.986489][ T1] l2tp_core: L2TP core driver, V2.0 [ 3.987835][ T1] l2tp_ppp: PPPoL2TP kernel driver, V2.0 [ 3.989288][ T1] tipc: Activated (version 2.0.0) [ 3.990950][ T1] NET: Registered protocol family 30 [ 3.992482][ T1] tipc: Started in single node mode [ 3.993842][ T1] 9pnet: Installing 9P2000 support [ 3.995677][ T1] NET: Registered protocol family 40 [ 4.002799][ T1] IPI shorthand broadcast: enabled [ 4.004196][ T1] AVX2 version of gcm_enc/dec engaged. [ 4.005580][ T1] AES CTR mode by8 optimization enabled [ 4.009529][ T1] sched_clock: Marking stable (3993712471, 15790534)->(4008505348, 997657) [ 4.012569][ T1] registered taskstats version 1 [ 4.013789][ T1] Loading compiled-in X.509 certificates [ 4.015858][ T1] Key type ._fscrypt registered [ 4.016994][ T1] Key type .fscrypt registered [ 4.018205][ T1] Key type fscrypt-provisioning registered [ 4.022074][ T1] cfg80211: Loading compiled-in X.509 certificates for regulatory database [ 4.024996][ T115] cryptomgr_probe (115) used greatest stack depth: 29072 bytes left [ 4.027684][ T1] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7' [ 4.029482][ T1] ALSA device list: [ 4.030437][ T96] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 4.032593][ T96] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 4.034653][ T1] No soundcards found. [ 4.070368][ T12] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input2 [ 4.082893][ T1] EXT4-fs (sda1): mounted filesystem without journal. Opts: (null) [ 4.084287][ T1] VFS: Mounted root (ext4 filesystem) readonly on device 8:1. [ 4.102943][ T1] devtmpfs: mounted [ 4.105635][ T1] Freeing unused kernel image memory: 1956K [ 4.169589][ T1] Write protecting the kernel read-only data: 79872k [ 4.172135][ T1] Freeing unused kernel image memory: 2012K [ 4.174064][ T1] Freeing unused kernel image memory: 1784K [ 4.174868][ T1] Run /sbin/init as init process [ 5.707923][ T1] SELinux: Permission getrlimit in class process not defined in policy. [ 5.709280][ T1] SELinux: Class process2 not defined in policy. [ 5.710184][ T1] SELinux: Permission watch in class filesystem not defined in policy. [ 5.711400][ T1] SELinux: Permission map in class file not defined in policy. [ 5.712488][ T1] SELinux: Permission watch in class file not defined in policy. [ 5.713612][ T1] SELinux: Permission watch_mount in class file not defined in policy. [ 5.714769][ T1] SELinux: Permission watch_sb in class file not defined in policy. [ 5.715907][ T1] SELinux: Permission watch_with_perm in class file not defined in policy. [ 5.717109][ T1] SELinux: Permission watch_reads in class file not defined in policy. [ 5.718258][ T1] SELinux: Permission map in class dir not defined in policy. [ 5.719394][ T1] SELinux: Permission watch in class dir not defined in policy. [ 5.720672][ T1] SELinux: Permission watch_mount in class dir not defined in policy. [ 5.721919][ T1] SELinux: Permission watch_sb in class dir not defined in policy. [ 5.723127][ T1] SELinux: Permission watch_with_perm in class dir not defined in policy. [ 5.724355][ T1] SELinux: Permission watch_reads in class dir not defined in policy. [ 5.725476][ T1] SELinux: Permission map in class lnk_file not defined in policy. [ 5.726591][ T1] SELinux: Permission watch in class lnk_file not defined in policy. [ 5.727679][ T1] SELinux: Permission watch_mount in class lnk_file not defined in policy. [ 5.728883][ T1] SELinux: Permission watch_sb in class lnk_file not defined in policy. [ 5.730114][ T1] SELinux: Permission watch_with_perm in class lnk_file not defined in policy. [ 5.731365][ T1] SELinux: Permission watch_reads in class lnk_file not defined in policy. [ 5.732515][ T1] SELinux: Permission map in class chr_file not defined in policy. [ 5.733643][ T1] SELinux: Permission watch in class chr_file not defined in policy. [ 5.734878][ T1] SELinux: Permission watch_mount in class chr_file not defined in policy. [ 5.736052][ T1] SELinux: Permission watch_sb in class chr_file not defined in policy. [ 5.737179][ T1] SELinux: Permission watch_with_perm in class chr_file not defined in policy. [ 5.738594][ T1] SELinux: Permission watch_reads in class chr_file not defined in policy. [ 5.739880][ T1] SELinux: Permission map in class blk_file not defined in policy. [ 5.740983][ T1] SELinux: Permission watch in class blk_file not defined in policy. [ 5.742102][ T1] SELinux: Permission watch_mount in class blk_file not defined in policy. [ 5.743241][ T1] SELinux: Permission watch_sb in class blk_file not defined in policy. [ 5.744366][ T1] SELinux: Permission watch_with_perm in class blk_file not defined in policy. [ 5.745632][ T1] SELinux: Permission watch_reads in class blk_file not defined in policy. [ 5.746840][ T1] SELinux: Permission map in class sock_file not defined in policy. [ 5.747979][ T1] SELinux: Permission watch in class sock_file not defined in policy. [ 5.749185][ T1] SELinux: Permission watch_mount in class sock_file not defined in policy. [ 5.750355][ T1] SELinux: Permission watch_sb in class sock_file not defined in policy. [ 5.751696][ T1] SELinux: Permission watch_with_perm in class sock_file not defined in policy. [ 5.752971][ T1] SELinux: Permission watch_reads in class sock_file not defined in policy. [ 5.754225][ T1] SELinux: Permission map in class fifo_file not defined in policy. [ 5.755423][ T1] SELinux: Permission watch in class fifo_file not defined in policy. [ 5.756602][ T1] SELinux: Permission watch_mount in class fifo_file not defined in policy. [ 5.757805][ T1] SELinux: Permission watch_sb in class fifo_file not defined in policy. [ 5.759069][ T1] SELinux: Permission watch_with_perm in class fifo_file not defined in policy. [ 5.760371][ T1] SELinux: Permission watch_reads in class fifo_file not defined in policy. [ 5.761677][ T1] SELinux: Permission map in class socket not defined in policy. [ 5.762777][ T1] SELinux: Permission map in class tcp_socket not defined in policy. [ 5.763888][ T1] SELinux: Permission map in class udp_socket not defined in policy. [ 5.765024][ T1] SELinux: Permission map in class rawip_socket not defined in policy. [ 5.766175][ T1] SELinux: Permission map in class netlink_socket not defined in policy. [ 5.767409][ T1] SELinux: Permission map in class packet_socket not defined in policy. [ 5.768585][ T1] SELinux: Permission map in class key_socket not defined in policy. [ 5.769680][ T1] SELinux: Permission map in class unix_stream_socket not defined in policy. [ 5.770941][ T1] SELinux: Permission map in class unix_dgram_socket not defined in policy. [ 5.772225][ T1] SELinux: Permission map in class netlink_route_socket not defined in policy. [ 5.773553][ T1] SELinux: Permission nlmsg_readpriv in class netlink_route_socket not defined in policy. [ 5.774860][ T1] SELinux: Permission map in class netlink_tcpdiag_socket not defined in policy. [ 5.776108][ T1] SELinux: Permission map in class netlink_nflog_socket not defined in policy. [ 5.777310][ T1] SELinux: Permission map in class netlink_xfrm_socket not defined in policy. [ 5.778537][ T1] SELinux: Permission map in class netlink_selinux_socket not defined in policy. [ 5.779803][ T1] SELinux: Permission map in class netlink_iscsi_socket not defined in policy. [ 5.781023][ T1] SELinux: Permission map in class netlink_audit_socket not defined in policy. [ 5.782262][ T1] SELinux: Permission map in class netlink_fib_lookup_socket not defined in policy. [ 5.783547][ T1] SELinux: Permission map in class netlink_connector_socket not defined in policy. [ 5.784870][ T1] SELinux: Permission map in class netlink_netfilter_socket not defined in policy. [ 5.786151][ T1] SELinux: Permission map in class netlink_dnrt_socket not defined in policy. [ 5.787431][ T1] SELinux: Permission map in class netlink_kobject_uevent_socket not defined in policy. [ 5.788757][ T1] SELinux: Permission map in class netlink_generic_socket not defined in policy. [ 5.790103][ T1] SELinux: Permission map in class netlink_scsitransport_socket not defined in policy. [ 5.791455][ T1] SELinux: Permission map in class netlink_rdma_socket not defined in policy. [ 5.792677][ T1] SELinux: Permission map in class netlink_crypto_socket not defined in policy. [ 5.793893][ T1] SELinux: Permission map in class appletalk_socket not defined in policy. [ 5.795050][ T1] SELinux: Permission map in class dccp_socket not defined in policy. [ 5.796195][ T1] SELinux: Permission map in class tun_socket not defined in policy. [ 5.797343][ T1] SELinux: Class sctp_socket not defined in policy. [ 5.798304][ T1] SELinux: Class icmp_socket not defined in policy. [ 5.799298][ T1] SELinux: Class ax25_socket not defined in policy. [ 5.800225][ T1] SELinux: Class ipx_socket not defined in policy. [ 5.801157][ T1] SELinux: Class netrom_socket not defined in policy. [ 5.802395][ T1] SELinux: Class atmpvc_socket not defined in policy. [ 5.803371][ T1] SELinux: Class x25_socket not defined in policy. [ 5.804325][ T1] SELinux: Class rose_socket not defined in policy. [ 5.805261][ T1] SELinux: Class decnet_socket not defined in policy. [ 5.806206][ T1] SELinux: Class atmsvc_socket not defined in policy. [ 5.807118][ T1] SELinux: Class rds_socket not defined in policy. [ 5.807998][ T1] SELinux: Class irda_socket not defined in policy. [ 5.808971][ T1] SELinux: Class pppox_socket not defined in policy. [ 5.809932][ T1] SELinux: Class llc_socket not defined in policy. [ 5.810802][ T1] SELinux: Class can_socket not defined in policy. [ 5.811672][ T1] SELinux: Class tipc_socket not defined in policy. [ 5.812634][ T1] SELinux: Class bluetooth_socket not defined in policy. [ 5.813601][ T1] SELinux: Class iucv_socket not defined in policy. [ 5.814493][ T1] SELinux: Class rxrpc_socket not defined in policy. [ 5.815447][ T1] SELinux: Class isdn_socket not defined in policy. [ 5.816364][ T1] SELinux: Class phonet_socket not defined in policy. [ 5.817269][ T1] SELinux: Class ieee802154_socket not defined in policy. [ 5.818251][ T1] SELinux: Class caif_socket not defined in policy. [ 5.819351][ T1] SELinux: Class alg_socket not defined in policy. [ 5.820221][ T1] SELinux: Class nfc_socket not defined in policy. [ 5.821118][ T1] SELinux: Class vsock_socket not defined in policy. [ 5.822066][ T1] SELinux: Class kcm_socket not defined in policy. [ 5.822937][ T1] SELinux: Class qipcrtr_socket not defined in policy. [ 5.823871][ T1] SELinux: Class smc_socket not defined in policy. [ 5.824772][ T1] SELinux: Class infiniband_pkey not defined in policy. [ 5.825718][ T1] SELinux: Class infiniband_endport not defined in policy. [ 5.826691][ T1] SELinux: Class bpf not defined in policy. [ 5.827567][ T1] SELinux: Class xdp_socket not defined in policy. [ 5.828639][ T1] SELinux: Class perf_event not defined in policy. [ 5.829558][ T1] SELinux: Class anon_inode not defined in policy. [ 5.830476][ T1] SELinux: the above unknown classes and permissions will be allowed [ 5.832091][ T1] SELinux: policy capability network_peer_controls=1 [ 5.833030][ T1] SELinux: policy capability open_perms=1 [ 5.833826][ T1] SELinux: policy capability extended_socket_class=0 [ 5.834803][ T1] SELinux: policy capability always_check_network=0 [ 5.835765][ T1] SELinux: policy capability cgroup_seclabel=0 [ 5.836700][ T1] SELinux: policy capability nnp_nosuid_transition=0 [ 5.889161][ T22] audit: type=1403 audit(1617418500.489:2): auid=4294967295 ses=4294967295 lsm=selinux res=1 [ 5.902790][ T1] systemd[1]: Successfully loaded SELinux policy in 989.293ms. [ 6.019207][ T1] systemd[1]: Failed to insert module 'autofs4': No such file or directory [ 6.023377][ T22] audit: type=1400 audit(1617418500.629:3): avc: denied { associate } for pid=1 comm="systemd" name="pts" scontext=system_u:object_r:devpts_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 6.051052][ T1] systemd[1]: Relabelled /dev and /run in 21.290ms. [ 6.102598][ T1] systemd[1]: systemd 232 running in system mode. (+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN) [ 6.106036][ T1] systemd[1]: Detected virtualization kvm. [ 6.106961][ T1] systemd[1]: Detected architecture x86-64. Welcome to Debian GNU/Linux 9 (stretch)! [ 6.156766][ T1] systemd[1]: Set hostname to . [ 6.280548][ T131] selinuxenabled (131) used greatest stack depth: 25648 bytes left [ 6.286867][ T125] systemd-gpt-aut (125) used greatest stack depth: 24368 bytes left [ 6.319160][ T129] selinux-autorel (129) used greatest stack depth: 23984 bytes left [ 7.042114][ T1] systemd[1]: Started Dispatch Password Requests to Console Directory Watch. [ OK ] Started Dispatch Password Requests to Console Directory Watch. [ 7.070351][ T1] systemd[1]: Created slice System Slice. [ OK ] Created slice System Slice. [ 7.099608][ T1] systemd[1]: Reached target Swap. [ OK ] Reached target Swap. [ 7.144029][ T1] systemd[1]: Listening on Journal Socket (/dev/log). [ OK ] Listening on Journal Socket (/dev/log). [ 7.171187][ T1] systemd[1]: Listening on udev Control Socket. [ OK ] Listening on udev Control Socket. [ 7.200238][ T1] systemd[1]: Started Forward Password Requests to Wall Directory Watch. [ OK ] Started Forward Password Requests to Wall Directory Watch. [ OK ] Reached target Paths. [ OK ] Listening on /dev/initctl Compatibility Named Pipe. [UNSUPP] Starting of Arbitrary Executable Fiā€¦tem Automount Point not supported. Mounting /sys/kernel/config... [ OK ] Created slice system-getty.slice. Mounting /proc/sys/fs/binfmt_misc... [ OK ] Listening on Journal Socket. Starting Create Static Device Nodes in /dev... Starting Remount Root and Kernel File Systems... Mounting /sys/kernel/debug... [ 7.515732][ T138] EXT4-fs (sda1): re-mounted. Opts: (null) [ 7.530568][ T22] audit: type=1400 audit(1617418502.139:4): avc: denied { audit_read } for pid=1 comm="systemd" capability=37 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ OK ] Listening on Journal Audit Socket. [ OK ] Reached target Slices. [ OK ] Reached target Encrypted Volumes. [ OK ] Listening on Syslog Socket. Starting Journal Service... [ OK ] Reached target Remote File Systems. [ OK ] Created slice system-serial\x2dgetty.slice. [ OK ] Listening on udev Kernel Socket. [ OK ] Reached target Sockets. Starting Load Kernel Modules... [ OK ] Mounted /sys/kernel/debug. [ OK ] Mounted /sys/kernel/config. [ OK ] Mounted /proc/sys/fs/binfmt_misc. [ OK ] Started Journal Service. [ OK ] Started Create Static Device Nodes in /dev. [ OK ] Started Remount Root and Kernel File Systems. [ OK ] Started Load Kernel Modules. Mounting FUSE Control File System... Starting Apply Kernel Variables... Starting udev Coldplug all Devices... Starting Load/Save Random Seed... Starting udev Kernel Device Manager... [ OK ] Reached target Local File Systems (Pre). Starting Flush Journal to Persistent Storage... [ OK ] Reached target Local File Systems. [ OK ] Mounted FUSE Control File System. [ OK ] Started Apply Kernel Variables. [ OK ] Started Load/Save Random Seed. [ 8.108667][ T22] audit: type=1107 audit(1617418502.709:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: denied { stop } for auid=n/a uid=0 gid=0 path="/lib/systemd/system/systemd-journald.service" cmdline="/bin/journalctl --flush" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=service [ 8.108667][ T22] exe="/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' [ 8.116063][ T140] systemd-journald[140]: Received request to flush runtime journal from PID 1 Starting Raise network interfaces... [ OK ] Started Flush Journal to Persistent Storage. Starting Create Volatile Files and Directories... [ OK ] Started udev Kernel Device Manager. [ OK ] Started Create Volatile Files and Directories. Starting Update UTMP about System Boot/Shutdown... Starting Network Time Synchronization... [ OK ] Started Update UTMP about System Boot/Shutdown. [ OK ] Started Network Time Synchronization. [ OK ] Reached target System Time Synchronized. [ OK ] Started udev Coldplug all Devices. [ OK ] Reached target System Initialization. [ OK ] Started Daily Cleanup of Temporary Directories. [ OK ] Reached target Basic System. Starting getty on tty2-tty6 if dbus and logind are not available... [ OK ] Started Regular background program processing daemon. [ 9.000212][ T96] cfg80211: failed to load regulatory.db Starting System Logging Service... [ OK ] Started Daily apt download activities. [ OK ] Started Daily apt upgrade and clean activities. [ OK ] Reached target Timers. [ 9.084873][ T22] audit: type=1107 audit(1617418503.689:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: denied { start } for auid=n/a uid=0 gid=0 path="/lib/systemd/system/getty@.service" cmdline="/bin/systemctl --no-block start getty@tty2.service getty@tty3.service getty@tty4.service getty@tty5.service getty@tty6.service" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=service [ 9.084873][ T22] exe="/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' [ 9.113728][ T22] audit: type=1107 audit(1617418503.719:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: denied { status } for auid=n/a uid=0 gid=0 path="/lib/systemd/system/getty@.service" cmdline="/bin/systemctl --no-block start getty@tty2.service getty@tty3.service getty@tty4.service getty@tty5.service getty@tty6.service" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=service [ 9.113728][ T22] exe="/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started System Logging Service. [ 9.717447][ T257] ip (257) used greatest stack depth: 20688 bytes left Stopping Network Time Synchronization... [ OK ] Stopped Network Time Synchronization. Starting Network Time Synchronization... [ OK ] Started Network Time Synchronization.