0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r3, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xd5897bba9a8f358a) socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) setxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000380)='/dev/nvram\x00', 0xb, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000006440)={0x0, 0x11, &(0x7f00000063c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00)\x00'/28, @ANYRES32=0x0, @ANYBLOB="14001b00000000000000000000000000000000010c00"/32], 0x40}], 0x1}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x15) socketpair(0x27, 0x800, 0x3, &(0x7f000000c4c0)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='projid_map\x00') read$msr(r6, &(0x7f0000002440)=""/4086, 0xff6) 21:23:13 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$getown(r1, 0x9) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x250d40, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x2040, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/113, 0x71}, {&(0x7f0000000140)=""/5, 0x5}, {&(0x7f0000000180)=""/174, 0xae}, {&(0x7f0000000240)=""/95, 0x5f}], 0x4, 0x379, 0x1ff) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) fcntl$getown(r1, 0x9) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xa) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x250d40, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x2040, 0x0) (async) preadv(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/113, 0x71}, {&(0x7f0000000140)=""/5, 0x5}, {&(0x7f0000000180)=""/174, 0xae}, {&(0x7f0000000240)=""/95, 0x5f}], 0x4, 0x379, 0x1ff) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (async) 21:23:13 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs271vHEUbAPBn72znTZy8NiF8xAlgBAiLDzt2AqSgAAQSBUhIUITS2E5kcolRbCQSWWAoQgmR6BElEn8BFTQIqJBooUeRIuQmgcpo73bts3NnfPbZC+zvJ20yszunmWdn5252xxtAaQ2n/yQRByPil4gYaGTXFxhu/HdreXHqj+XFqSRWVl7/PamXu7m8OJUXzT/Xn2eWGvljLeqdv3zl/GStNnMpy48tXHhnbP7ylSdnL0yemzk3c3Hi9OlTJ8efeXriqa7EmcZ1c+j9ueNHX37z2qtTZ6699cNXSR7/hji6ZHizg490ubKiHWpKJz0FNoSOVCMi7a7e+vgfiGqsdd5AvPRRoY0DdtVKps3hpRXgPyyJolsAFCP/oU/vf/Nt72YfxbvxfOMGKI37VrY1jvREJSvTu+H+tpuGI+LM0p+fp1vsznMIAIB1vknnP0+0mv9V4u6mcv/P1lAGI+KOiDgcEXdGxJGIuCuiXvaeiLi3w/o3LpLcPv+pXN9WYFuUzv+ezda21s//8tlfDFaz3KF6/L3J2dnazInsnIxE7740P75JHd+++PMn7Y41z//SLa0/nwtm7bjes2/9Z6YnFyZ3EnOzGx9GDPW0ij9ZXQlIIuJoRAxts47Zx7483u7Y38e/iS6sM618EfFoo/+XYkP8uWTz9cmx/0Vt5sRYflXc7sefrr7Wrv4dxd8Faf8faHn9r8Y/mDSv1853XsfVXz9ue0+z3eu/L3mjnu7L9r03ubBwaTyiL3kl2//c2v6Jtc/m+bx8Gv/IQ63H/+FYOxPHIiK9iO+LiPsj4oGs7Q9GRP+nm8f//QsPv739+HdXGv90R/3feaJ6/ruv11U62En8af+fqqdGsj1b+f7bagN3ev4AAADg36ASEQcjqYyupiuV0dHG3/AfiQOV2tz8wuNn5969ON14R2Aweiv5k66Bpueh49ltfZ6f2JA/mT03/qy6v54fnZqrTRcdPJRcf5vxn/qtWnTrgF3nfS0oL+Mfysv4h/Iy/qG8Woz//UW0A9h7rX7/PyigHcDeM/+H8jL+obyMfygv4x9KaSfv9UuUORGVf0QzJHYpUfQ3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHf8FQAA//+X0+rn") [ 709.321812][T23832] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 709.390093][T23837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=23837 comm=syz-executor.3 [ 709.500334][T23818] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 709.623565][T23818] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) 21:23:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000800100"/24], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000800100"/24], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x20c2}], 0x1, &(0x7f0000000180), &(0x7f00000001c0)={[0x8]}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'erspan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'erspan0\x00', 0x0}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000001700)=0x4) (async) sched_setscheduler(r6, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x2) r9 = gettid() connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r8, &(0x7f0000000a80)) (async) fstat(r8, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r8, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1f3cd45b4043b97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) sched_setscheduler(r6, 0x0, &(0x7f0000000100)=0x2) (async) sched_setscheduler(r6, 0x0, &(0x7f0000000100)=0x2) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) 21:23:13 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:13 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = dup(0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x0, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x1000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000008c0), 0x2, 0x0) r8 = epoll_create(0x2) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) r11 = socket$can_bcm(0x1d, 0x2, 0x2) syz_clone3(&(0x7f0000001e80)={0x810200, &(0x7f0000000c80)=0xffffffffffffffff, &(0x7f0000000cc0), &(0x7f0000000d00), {0x21}, &(0x7f0000000d40)=""/4096, 0x1000, &(0x7f0000001d40)=""/240, &(0x7f0000001e40)=[0x0, 0x0, 0x0], 0x3}, 0x58) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$KVM_GET_IRQCHIP(r14, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x1) r15 = socket$tipc(0x1e, 0x2, 0x0) r16 = getgid() r17 = geteuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000100)="24eabffcf943c1a9428bfc7e98ad1041fa1d66a809f8723481dacb0ecd48bb7aa846d200262d565452579a757f6ac38cccb9ee4a57962ff51e1d5e5108f8f6f0007ef15964f72471867e90bf8c40907003ee23691a16eef78b15", 0x5a}, {&(0x7f0000000000)="2bb12c", 0x3}, {&(0x7f0000000180)="1677598c72db8072067967701adc34141c0626c432db6488361a944f3b0590d50328d949e099f1f328f7591783db87ecdee87c39e0dc8b6a0c04a02f676790b6324656bac32bca076c41b9c7903a873325aa356115d91212a42643043c23d9092c4447325a5daad4b940f82f11a0211af0a021bab857925f9999a87feae73cbeeb723dcfe2f30af2326070641e8f552b5dfd56d8e4f2627133bf31735771aa779b2a66e33cf6724815ef8ff77784722eb99b70a0a69abde979eb047f38525646b1adcfcad1326b33ed0cc15f572bd44ee9b67b83b23ea7385ad4cc2d587fa707e3daeb6b08fafd33cf51eb476e6deeeebeee31cb087387d4dc27beb1", 0xfc}, {&(0x7f0000000280)="fd89ebb6df86160e6913ae013b61febd37f0c9e6fc9e6f271b30a4353becc2a48996733274138a3323e7ccefaa958cb1194dd5bbc01d8d64773408ecc244aa946731ceb628b6960dc7186f578bec84aa775c349fe51ff258e15f8a119fd13f78030619bfbd7b8b398daf14e2e1f0bd20d37e679bfbe73e9f65f2c7cc8eb57ac8d44e92304d34e5095f199bf1b8f9bf4e", 0x90}, {&(0x7f0000000340)="dbb445273d09ccf663a61facec3206ae883f5be6e494841e76861a0fe778ae128234816c51dc2ee0b2581931e5be6504daeb2efa1ac245de75d886de619deb7d70b167dbbe76b985d62987035ec375628abc79396aaadb113a1dd0056fb152826238bcf41353fd8e7b466c592cebe701afda0e9470066c8938ffab1e0f3907815eea6061e11c365c697be4a8d0be5e1d203b4ef5099d9a9a68c208a5b1eee02da2279331e8842be0c2e0ab137e0b7e45fa2c469c1e240474995cc532cdfd8147bdaeb4cb5abbcb432083194680c0efb5c111c1a0655f5bc7fa2b7c0553950a2ddef199df1370a744", 0xe8}, {&(0x7f0000000440)="819223fc58b17c95d832c85d4cdf50693d67a7bccacb102abf4f1664baca59208976818a7da39fe00f2faa4b85bdf3e0a7df12dd3c109d186ef988bbc822b2a9f41813bcf644dd912c410a1d260fc4f83b4cd55f86be9342c05ab45bed5e60bfc29c4d10284d52a472cdf0d72aeaf4b9dd2fbcc1cc3b6eafdcab9d690d85928f7a7c0bdbb9669e2e2f3d28428c86f2cade87e58657a15675cc7ee9f2710971520164c1e6d74b301dcc94cf29f7bcc1a6b8f6b974d9a1d279f52e647267c7c041afac94c9cc98aa229164b8d51727304d99013cf9af1103a0ce70fa4cc3269a06563056e93727", 0xe6}, {&(0x7f0000000540)="346e69cc7e8281d77d718ad6b15f80e9bb95039002e7ee208fea083ca1f17bcc03fb3c97eff9aa979ae0f9b719ce09f95066d0490f23fafea4987573f382a738876786bb45b7deca00d2b62963c39139f18f345c248e3358aae62b9cfa8b2852fba99c9da91270c9c7967b58f22b1c319233d1eab5c53ec1109a6790d4f3784c20734f4da657200e07c436ecdd927ae17c99e73ad00aa1a60f366a490b975593702fbbe0939fa177f22b1e5eeee80b7f0c6b09f4e5a024b09dedea6143d0518f8ec3", 0xc2}, {&(0x7f0000000640)="8f4fb49f503f5788b30bdb434d55ff2143c4057b6c1cfe961a0ce49f0a75ad8598c5b161ff172b05559f36e46247505d938a7a84e93da989209710d5dd8484c3d1b9159037d8482287", 0x49}], 0x8, &(0x7f0000002240)=ANY=[@ANYBLOB="b8000000000000000100000002000000f66ad82b2645d14b2ff0c1d95ce51fa0052e17518809be6d49601d278b39daf337cfba08165d3ccf4983cb2e35e223b4e8cbc78543f49f3e67758cda0795879bfd09f3fa2f921ec9cd3559d5f07bf684f6ca5523c7381f7c090fe9a3276c4af09ec24bb07842405f0f9600679ec53a38ef80bd2e1ff009221b188446b200d1ffdf38f15efe556c258dc98ae3d328b34c01dff3d906043dbfd8036d2dee1ffc3170a4566a725a31198acacbbbdf501e058d5a78d4cb0ba0284b2d7417869b9dfa52b6fc5a54442e6414c22f08a4d9a9e27cc73370ab4e3a7cd8712c5d2dc3888ed81f0907f820a5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r0], 0xa8, 0x8000}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a40)="f392d4af23e961fa429498a90d89111c38d9a0b50ac90d6cf7b71292cc9da4620a76a80709205b4dd8bc079c940848c3d81eae9bcfa33382a5b79258ce2dba0e6bf75305df8ca3146db53d8863964bbcb639d084897abf5f8a51385ed150717dc11a712e0467854a1e8de337f4aaf69f5e812c619f89e948fd78cb9015a62269741dc30a8d5148ea566593b28be4cfbc8056ef379cdbaab5d8ae732b3ccdfb7650fc89321329e6a278cd1ba5470367e302922f53299bf95a05a669d8a9afca782aa59e1456c83ba6ac7ed5eff1e4fbcfd0dafecf4a22011622cc934a2c0a641c84e90b825a69b6fba03716a08969df", 0xef}, {&(0x7f0000000b40)="ddbfd8c5664569de93c4f3245dec5db4a72769ac2fde8962300cef339e32c15000ed7208e9c8749c455a5661924af7fea639111b573904d94454bb647b5f14d716d9fd5716dc2af00004dc72be20cd281bde35f02692064f000e3c566b551467b9cde8120007ef3bfa168b41a32da98e31476c3235027b8c745a3df6e93f8a7f6a6a5c0c220730ac13c2f708472cde2b9eb3fd5abea12d693f96a5603c354ae417809d9daab6e3b5604a2ee396e63e1ea5e70534c6749767c0851ed90b490aa09b26e578", 0xc4}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="18001000000000000100000001000000a733b230d080fea3a58d1912", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="100000000000000001000000010000001c000000000000000100000001000000", @ANYRES32=r12, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x40000}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001f80)="ac7b96da2ec7c065a9b13733f8ada6a5438546852569fc14a5a32bd82908accca5a25b855050797cd4465a281259b32455a8435945559133f63c5a518689d0180647187bb40a7a29b9b2b4b4debe528ec28791035efecdbdd7ce0f0be6", 0x5d}, {&(0x7f0000002000)="3281aa918068c3ba11ee0a876d1219a17506dd560022a4074f2f46ee0ff576c6412e50d1466675465b39038d4b1254cce4a84cf292aa48f1a4d6c69793bb7d3f6df74738df412208eabf0656ae585216bc26e93873846cf4e8e469d2d3bbce71dae2844b1355eee78a28565f6b60078534cf09f2a09e52f9da", 0x79}, {&(0x7f0000002080)}, {&(0x7f00000020c0)="cbf0d35b", 0x4}], 0x4, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r17, 0xee00}}}], 0x20, 0xe5009a663bae114c}}], 0x3, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 709.859388][T23818] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 709.868394][T23832] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 709.891605][T23832] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 709.942355][T23846] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 21:23:14 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000800100"/24], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x20c2}], 0x1, &(0x7f0000000180), &(0x7f00000001c0)={[0x8]}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'erspan0\x00', 0x0}) r5 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x2) (rerun: 32) r9 = gettid() (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) fstat(r8, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(r8, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1f3cd45b4043b97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) (async, rerun: 32) sched_setscheduler(r6, 0x0, &(0x7f0000000100)=0x2) (async, rerun: 32) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) 21:23:14 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:14 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:14 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) r1 = dup(0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x0, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) (async) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x1000) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000008c0), 0x2, 0x0) (async) r8 = epoll_create(0x2) (async) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r10) (async) r11 = socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_clone3(&(0x7f0000001e80)={0x810200, &(0x7f0000000c80)=0xffffffffffffffff, &(0x7f0000000cc0), &(0x7f0000000d00), {0x21}, &(0x7f0000000d40)=""/4096, 0x1000, &(0x7f0000001d40)=""/240, &(0x7f0000001e40)=[0x0, 0x0, 0x0], 0x3}, 0x58) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$KVM_GET_IRQCHIP(r14, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x1) (async) r15 = socket$tipc(0x1e, 0x2, 0x0) (async) r16 = getgid() r17 = geteuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000100)="24eabffcf943c1a9428bfc7e98ad1041fa1d66a809f8723481dacb0ecd48bb7aa846d200262d565452579a757f6ac38cccb9ee4a57962ff51e1d5e5108f8f6f0007ef15964f72471867e90bf8c40907003ee23691a16eef78b15", 0x5a}, {&(0x7f0000000000)="2bb12c", 0x3}, {&(0x7f0000000180)="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", 0xfc}, {&(0x7f0000000280)="fd89ebb6df86160e6913ae013b61febd37f0c9e6fc9e6f271b30a4353becc2a48996733274138a3323e7ccefaa958cb1194dd5bbc01d8d64773408ecc244aa946731ceb628b6960dc7186f578bec84aa775c349fe51ff258e15f8a119fd13f78030619bfbd7b8b398daf14e2e1f0bd20d37e679bfbe73e9f65f2c7cc8eb57ac8d44e92304d34e5095f199bf1b8f9bf4e", 0x90}, {&(0x7f0000000340)="dbb445273d09ccf663a61facec3206ae883f5be6e494841e76861a0fe778ae128234816c51dc2ee0b2581931e5be6504daeb2efa1ac245de75d886de619deb7d70b167dbbe76b985d62987035ec375628abc79396aaadb113a1dd0056fb152826238bcf41353fd8e7b466c592cebe701afda0e9470066c8938ffab1e0f3907815eea6061e11c365c697be4a8d0be5e1d203b4ef5099d9a9a68c208a5b1eee02da2279331e8842be0c2e0ab137e0b7e45fa2c469c1e240474995cc532cdfd8147bdaeb4cb5abbcb432083194680c0efb5c111c1a0655f5bc7fa2b7c0553950a2ddef199df1370a744", 0xe8}, {&(0x7f0000000440)="819223fc58b17c95d832c85d4cdf50693d67a7bccacb102abf4f1664baca59208976818a7da39fe00f2faa4b85bdf3e0a7df12dd3c109d186ef988bbc822b2a9f41813bcf644dd912c410a1d260fc4f83b4cd55f86be9342c05ab45bed5e60bfc29c4d10284d52a472cdf0d72aeaf4b9dd2fbcc1cc3b6eafdcab9d690d85928f7a7c0bdbb9669e2e2f3d28428c86f2cade87e58657a15675cc7ee9f2710971520164c1e6d74b301dcc94cf29f7bcc1a6b8f6b974d9a1d279f52e647267c7c041afac94c9cc98aa229164b8d51727304d99013cf9af1103a0ce70fa4cc3269a06563056e93727", 0xe6}, {&(0x7f0000000540)="346e69cc7e8281d77d718ad6b15f80e9bb95039002e7ee208fea083ca1f17bcc03fb3c97eff9aa979ae0f9b719ce09f95066d0490f23fafea4987573f382a738876786bb45b7deca00d2b62963c39139f18f345c248e3358aae62b9cfa8b2852fba99c9da91270c9c7967b58f22b1c319233d1eab5c53ec1109a6790d4f3784c20734f4da657200e07c436ecdd927ae17c99e73ad00aa1a60f366a490b975593702fbbe0939fa177f22b1e5eeee80b7f0c6b09f4e5a024b09dedea6143d0518f8ec3", 0xc2}, {&(0x7f0000000640)="8f4fb49f503f5788b30bdb434d55ff2143c4057b6c1cfe961a0ce49f0a75ad8598c5b161ff172b05559f36e46247505d938a7a84e93da989209710d5dd8484c3d1b9159037d8482287", 0x49}], 0x8, &(0x7f0000002240)=ANY=[@ANYBLOB="b8000000000000000100000002000000f66ad82b2645d14b2ff0c1d95ce51fa0052e17518809be6d49601d278b39daf337cfba08165d3ccf4983cb2e35e223b4e8cbc78543f49f3e67758cda0795879bfd09f3fa2f921ec9cd3559d5f07bf684f6ca5523c7381f7c090fe9a3276c4af09ec24bb07842405f0f9600679ec53a38ef80bd2e1ff009221b188446b200d1ffdf38f15efe556c258dc98ae3d328b34c01dff3d906043dbfd8036d2dee1ffc3170a4566a725a31198acacbbbdf501e058d5a78d4cb0ba0284b2d7417869b9dfa52b6fc5a54442e6414c22f08a4d9a9e27cc73370ab4e3a7cd8712c5d2dc3888ed81f0907f820a5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r0], 0xa8, 0x8000}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a40)="f392d4af23e961fa429498a90d89111c38d9a0b50ac90d6cf7b71292cc9da4620a76a80709205b4dd8bc079c940848c3d81eae9bcfa33382a5b79258ce2dba0e6bf75305df8ca3146db53d8863964bbcb639d084897abf5f8a51385ed150717dc11a712e0467854a1e8de337f4aaf69f5e812c619f89e948fd78cb9015a62269741dc30a8d5148ea566593b28be4cfbc8056ef379cdbaab5d8ae732b3ccdfb7650fc89321329e6a278cd1ba5470367e302922f53299bf95a05a669d8a9afca782aa59e1456c83ba6ac7ed5eff1e4fbcfd0dafecf4a22011622cc934a2c0a641c84e90b825a69b6fba03716a08969df", 0xef}, {&(0x7f0000000b40)="ddbfd8c5664569de93c4f3245dec5db4a72769ac2fde8962300cef339e32c15000ed7208e9c8749c455a5661924af7fea639111b573904d94454bb647b5f14d716d9fd5716dc2af00004dc72be20cd281bde35f02692064f000e3c566b551467b9cde8120007ef3bfa168b41a32da98e31476c3235027b8c745a3df6e93f8a7f6a6a5c0c220730ac13c2f708472cde2b9eb3fd5abea12d693f96a5603c354ae417809d9daab6e3b5604a2ee396e63e1ea5e70534c6749767c0851ed90b490aa09b26e578", 0xc4}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="18001000000000000100000001000000a733b230d080fea3a58d1912", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="100000000000000001000000010000001c000000000000000100000001000000", @ANYRES32=r12, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x40000}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001f80)="ac7b96da2ec7c065a9b13733f8ada6a5438546852569fc14a5a32bd82908accca5a25b855050797cd4465a281259b32455a8435945559133f63c5a518689d0180647187bb40a7a29b9b2b4b4debe528ec28791035efecdbdd7ce0f0be6", 0x5d}, {&(0x7f0000002000)="3281aa918068c3ba11ee0a876d1219a17506dd560022a4074f2f46ee0ff576c6412e50d1466675465b39038d4b1254cce4a84cf292aa48f1a4d6c69793bb7d3f6df74738df412208eabf0656ae585216bc26e93873846cf4e8e469d2d3bbce71dae2844b1355eee78a28565f6b60078534cf09f2a09e52f9da", 0x79}, {&(0x7f0000002080)}, {&(0x7f00000020c0)="cbf0d35b", 0x4}], 0x4, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r17, 0xee00}}}], 0x20, 0xe5009a663bae114c}}], 0x3, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 710.223663][T23857] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 710.236316][T23857] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 710.248913][T23857] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:14 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) r1 = dup(0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x0, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) (async) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x1000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000008c0), 0x2, 0x0) (async) r8 = epoll_create(0x2) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) (async, rerun: 32) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) dup(r10) r11 = socket$can_bcm(0x1d, 0x2, 0x2) (async) syz_clone3(&(0x7f0000001e80)={0x810200, &(0x7f0000000c80)=0xffffffffffffffff, &(0x7f0000000cc0), &(0x7f0000000d00), {0x21}, &(0x7f0000000d40)=""/4096, 0x1000, &(0x7f0000001d40)=""/240, &(0x7f0000001e40)=[0x0, 0x0, 0x0], 0x3}, 0x58) (async) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$KVM_GET_IRQCHIP(r14, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) (async) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x1) (async) r15 = socket$tipc(0x1e, 0x2, 0x0) (async) r16 = getgid() (async) r17 = geteuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000100)="24eabffcf943c1a9428bfc7e98ad1041fa1d66a809f8723481dacb0ecd48bb7aa846d200262d565452579a757f6ac38cccb9ee4a57962ff51e1d5e5108f8f6f0007ef15964f72471867e90bf8c40907003ee23691a16eef78b15", 0x5a}, {&(0x7f0000000000)="2bb12c", 0x3}, {&(0x7f0000000180)="1677598c72db8072067967701adc34141c0626c432db6488361a944f3b0590d50328d949e099f1f328f7591783db87ecdee87c39e0dc8b6a0c04a02f676790b6324656bac32bca076c41b9c7903a873325aa356115d91212a42643043c23d9092c4447325a5daad4b940f82f11a0211af0a021bab857925f9999a87feae73cbeeb723dcfe2f30af2326070641e8f552b5dfd56d8e4f2627133bf31735771aa779b2a66e33cf6724815ef8ff77784722eb99b70a0a69abde979eb047f38525646b1adcfcad1326b33ed0cc15f572bd44ee9b67b83b23ea7385ad4cc2d587fa707e3daeb6b08fafd33cf51eb476e6deeeebeee31cb087387d4dc27beb1", 0xfc}, {&(0x7f0000000280)="fd89ebb6df86160e6913ae013b61febd37f0c9e6fc9e6f271b30a4353becc2a48996733274138a3323e7ccefaa958cb1194dd5bbc01d8d64773408ecc244aa946731ceb628b6960dc7186f578bec84aa775c349fe51ff258e15f8a119fd13f78030619bfbd7b8b398daf14e2e1f0bd20d37e679bfbe73e9f65f2c7cc8eb57ac8d44e92304d34e5095f199bf1b8f9bf4e", 0x90}, {&(0x7f0000000340)="dbb445273d09ccf663a61facec3206ae883f5be6e494841e76861a0fe778ae128234816c51dc2ee0b2581931e5be6504daeb2efa1ac245de75d886de619deb7d70b167dbbe76b985d62987035ec375628abc79396aaadb113a1dd0056fb152826238bcf41353fd8e7b466c592cebe701afda0e9470066c8938ffab1e0f3907815eea6061e11c365c697be4a8d0be5e1d203b4ef5099d9a9a68c208a5b1eee02da2279331e8842be0c2e0ab137e0b7e45fa2c469c1e240474995cc532cdfd8147bdaeb4cb5abbcb432083194680c0efb5c111c1a0655f5bc7fa2b7c0553950a2ddef199df1370a744", 0xe8}, {&(0x7f0000000440)="819223fc58b17c95d832c85d4cdf50693d67a7bccacb102abf4f1664baca59208976818a7da39fe00f2faa4b85bdf3e0a7df12dd3c109d186ef988bbc822b2a9f41813bcf644dd912c410a1d260fc4f83b4cd55f86be9342c05ab45bed5e60bfc29c4d10284d52a472cdf0d72aeaf4b9dd2fbcc1cc3b6eafdcab9d690d85928f7a7c0bdbb9669e2e2f3d28428c86f2cade87e58657a15675cc7ee9f2710971520164c1e6d74b301dcc94cf29f7bcc1a6b8f6b974d9a1d279f52e647267c7c041afac94c9cc98aa229164b8d51727304d99013cf9af1103a0ce70fa4cc3269a06563056e93727", 0xe6}, {&(0x7f0000000540)="346e69cc7e8281d77d718ad6b15f80e9bb95039002e7ee208fea083ca1f17bcc03fb3c97eff9aa979ae0f9b719ce09f95066d0490f23fafea4987573f382a738876786bb45b7deca00d2b62963c39139f18f345c248e3358aae62b9cfa8b2852fba99c9da91270c9c7967b58f22b1c319233d1eab5c53ec1109a6790d4f3784c20734f4da657200e07c436ecdd927ae17c99e73ad00aa1a60f366a490b975593702fbbe0939fa177f22b1e5eeee80b7f0c6b09f4e5a024b09dedea6143d0518f8ec3", 0xc2}, {&(0x7f0000000640)="8f4fb49f503f5788b30bdb434d55ff2143c4057b6c1cfe961a0ce49f0a75ad8598c5b161ff172b05559f36e46247505d938a7a84e93da989209710d5dd8484c3d1b9159037d8482287", 0x49}], 0x8, &(0x7f0000002240)=ANY=[@ANYBLOB="b8000000000000000100000002000000f66ad82b2645d14b2ff0c1d95ce51fa0052e17518809be6d49601d278b39daf337cfba08165d3ccf4983cb2e35e223b4e8cbc78543f49f3e67758cda0795879bfd09f3fa2f921ec9cd3559d5f07bf684f6ca5523c7381f7c090fe9a3276c4af09ec24bb07842405f0f9600679ec53a38ef80bd2e1ff009221b188446b200d1ffdf38f15efe556c258dc98ae3d328b34c01dff3d906043dbfd8036d2dee1ffc3170a4566a725a31198acacbbbdf501e058d5a78d4cb0ba0284b2d7417869b9dfa52b6fc5a54442e6414c22f08a4d9a9e27cc73370ab4e3a7cd8712c5d2dc3888ed81f0907f820a5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r9, @ANYRES32=r0], 0xa8, 0x8000}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a40)="f392d4af23e961fa429498a90d89111c38d9a0b50ac90d6cf7b71292cc9da4620a76a80709205b4dd8bc079c940848c3d81eae9bcfa33382a5b79258ce2dba0e6bf75305df8ca3146db53d8863964bbcb639d084897abf5f8a51385ed150717dc11a712e0467854a1e8de337f4aaf69f5e812c619f89e948fd78cb9015a62269741dc30a8d5148ea566593b28be4cfbc8056ef379cdbaab5d8ae732b3ccdfb7650fc89321329e6a278cd1ba5470367e302922f53299bf95a05a669d8a9afca782aa59e1456c83ba6ac7ed5eff1e4fbcfd0dafecf4a22011622cc934a2c0a641c84e90b825a69b6fba03716a08969df", 0xef}, {&(0x7f0000000b40)="ddbfd8c5664569de93c4f3245dec5db4a72769ac2fde8962300cef339e32c15000ed7208e9c8749c455a5661924af7fea639111b573904d94454bb647b5f14d716d9fd5716dc2af00004dc72be20cd281bde35f02692064f000e3c566b551467b9cde8120007ef3bfa168b41a32da98e31476c3235027b8c745a3df6e93f8a7f6a6a5c0c220730ac13c2f708472cde2b9eb3fd5abea12d693f96a5603c354ae417809d9daab6e3b5604a2ee396e63e1ea5e70534c6749767c0851ed90b490aa09b26e578", 0xc4}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="18001000000000000100000001000000a733b230d080fea3a58d1912", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="100000000000000001000000010000001c000000000000000100000001000000", @ANYRES32=r12, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00'], 0x68, 0x40000}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001f80)="ac7b96da2ec7c065a9b13733f8ada6a5438546852569fc14a5a32bd82908accca5a25b855050797cd4465a281259b32455a8435945559133f63c5a518689d0180647187bb40a7a29b9b2b4b4debe528ec28791035efecdbdd7ce0f0be6", 0x5d}, {&(0x7f0000002000)="3281aa918068c3ba11ee0a876d1219a17506dd560022a4074f2f46ee0ff576c6412e50d1466675465b39038d4b1254cce4a84cf292aa48f1a4d6c69793bb7d3f6df74738df412208eabf0656ae585216bc26e93873846cf4e8e469d2d3bbce71dae2844b1355eee78a28565f6b60078534cf09f2a09e52f9da", 0x79}, {&(0x7f0000002080)}, {&(0x7f00000020c0)="cbf0d35b", 0x4}], 0x4, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r17, 0xee00}}}], 0x20, 0xe5009a663bae114c}}], 0x3, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 21:23:14 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") [ 710.344893][T23869] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 4580)! [ 710.378510][T23869] EXT4-fs (loop3): group descriptors corrupted! 21:23:14 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x3f, 0x29c0) preadv(r1, &(0x7f0000001340)=[{&(0x7f0000000080)=""/102, 0x66}, {&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000200)=""/217, 0xd9}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x6, 0x200, 0x2040) 21:23:14 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs271vHEUbAPBn7+zkTZy8NiF8xAlgBAiLDzt2AqSgAAQSBUhIUITS2E5kcolRbCQSWWAoQgmR6BElEn8BFTQIqJBoQ48iRchNAtWhvdu1z5c747PPvsD+ftImM7tzmnl2d+5mdrwBFNZI+k8ScSAirkXEYD27vsBI/b9bK0vTf64sTSdRrb75R1Ird3NlaTovmn9uIM8s1/NHW9S7cOnyualKZfZilh9fPP/e+MKly0/PnZ86O3t29sLkqVMnT0w89+zkM12JM43r5vCH88eOvPr21denT19956dvkjz+pji6ZGSjg491ubJeO9iQTvp62BA6Uo6IvuxmvRaDUY61izcYr3zS08YBO6parVb3tj+8XAX+w5LodQuA3sh/6NP5b77t0tDjjnDjxfoEKI37VrbVj/RFKSvT3zS/7aZ03nV6+a8v0y125jkEAMA636Xjn6dajf9KcW9Duf9nayhDEXFXRByKiLsj4nBE3BNRK3tfRNzfYf3NiyS3j39K17cU2Cal47/ns7Wt9eO/fPQXQ+Usd7AWf39yZq4yezw7J6PRvzfNT2xQx/cv//pZu2ON4790S+vPx4JZO673NT2gm5lanNpOzI1ufBwx3Ncq/mR1JSCJiCMRMbzFOuae+PpYu2P/HP8GurDOVP0q4vH69V+Opvhzycbrk+P/i8rs8fH8rrjdz79ceaNd/duKvwvS67+/5f2/Gv9Q0rheu9B5HVd++7TtnGar9/+e5K1aek+274OpxcWLExF7ktey/S+s7Z9c+2yez8un8Y8+0rr/H4q1M3E0ItKb+IGIeDAiHsra/nBEDHy+cfw/vvTou1uPf2el8c90dP07T5TP/fDtukqHOok/vf4na6nRbM9mvv8228Dtnj8AAAD4NyhFxIFISmOr6VJpbKz+N/yHY3+pMr+w+OSZ+fcvzNTfERiK/lL+pGuw4XnoRDatz/OTTfkT2XPjL8r7avmx6fnKTK+Dh4IbaNP/U7+Xe906YMd5XwuKS/+H4tL/obj0fyiuFv1/Xy/aAey+Vr//H/WgHcDuM/6H4tL/obj0fygu/R8KaTvv9UsUORGlO6IZEjuU6PU3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHf8HQAA//9sY+cN") [ 710.386894][T23866] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 710.399702][T23866] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 710.412937][T23866] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 710.459725][T23886] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 710.472373][T23886] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 710.485054][T23886] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:14 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") [ 710.523839][T23891] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42994!=33349) [ 710.548126][T23891] EXT4-fs (loop3): group descriptors corrupted! 21:23:14 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="538d68fadbb6b3d5fbdfd19bfd11c76086721febe8ce9c3e54c18b5db5902ee3f92109faee42439c3831db754a5640d62f640025c71b80fecbe0664846d783922be935ad8f054b55f81e7540c1fd2f93d07c317608d0b2c80c789b27e1f969d4f302ac08da76f75d5e26ef99a9b056bda5a9a4a4b313278d0cc378926f42910c0ecb5255e511361e159042c2cdf3cc2ec916e7db38210864d2f5321a4e26e5c72b7f77d56488dc4f825f1b45042f08062a43f25b9b9a50c20a3325ef3e5e5b193fa9cd5f979bf92ddcfeb7893837c5307177254011f280f3da2f1c190dc9c9c6ee0e704ac3a46b655a8b9824310a15136adc21da1875e7c56fd27e26bcc246e5205de97348269f85ba4b832a7c4b8b0e1163c545d53b76237f0eac10e67c4e3e19ea1ac3d1e17a225a41013455ca8bf1dc98061f2797762d8af832"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) pipe(&(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="538d68fadbb6b3d5fbdfd19bfd11c76086721febe8ce9c3e54c18b5db5902ee3f92109faee42439c3831db754a5640d62f640025c71b80fecbe0664846d783922be935ad8f054b55f81e7540c1fd2f93d07c317608d0b2c80c789b27e1f969d4f302ac08da76f75d5e26ef99a9b056bda5a9a4a4b313278d0cc378926f42910c0ecb5255e511361e159042c2cdf3cc2ec916e7db38210864d2f5321a4e26e5c72b7f77d56488dc4f825f1b45042f08062a43f25b9b9a50c20a3325ef3e5e5b193fa9cd5f979bf92ddcfeb7893837c5307177254011f280f3da2f1c190dc9c9c6ee0e704ac3a46b655a8b9824310a15136adc21da1875e7c56fd27e26bcc246e5205de97348269f85ba4b832a7c4b8b0e1163c545d53b76237f0eac10e67c4e3e19ea1ac3d1e17a225a41013455ca8bf1dc98061f2797762d8af832"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) (async) 21:23:14 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000800100"/24], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x20c2}], 0x1, &(0x7f0000000180), &(0x7f00000001c0)={[0x8]}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'erspan0\x00', 0x0}) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x8, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @exit, @ldst={0x1, 0x0, 0x6, 0x9, 0x3, 0x8}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000280)='GPL\x00', 0x1, 0xc5, &(0x7f0000000300)=""/197, 0x40f00, 0xa, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x4, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0x1]}, 0x80) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 21:23:14 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x3f, 0x29c0) preadv(r1, &(0x7f0000001340)=[{&(0x7f0000000080)=""/102, 0x66}, {&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000200)=""/217, 0xd9}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x6, 0x200, 0x2040) 21:23:14 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:14 executing program 3: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:14 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:14 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) (async, rerun: 32) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (async, rerun: 32) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x3f, 0x29c0) preadv(r1, &(0x7f0000001340)=[{&(0x7f0000000080)=""/102, 0x66}, {&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000200)=""/217, 0xd9}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x6, 0x200, 0x2040) [ 710.668372][T23896] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 710.681106][T23896] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 710.693853][T23896] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 710.752636][T23908] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59420!=33349) [ 710.765423][T23908] EXT4-fs (loop3): group descriptors corrupted! [ 710.770496][T23901] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 710.784589][T23901] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 710.874184][T23901] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 710.963854][T23922] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 21:23:14 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x400880, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1f4, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1a8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xf4, 0x5, "8f5cf60d739667892bf5133d6fce515e2b3f7b770d8531b8b7d260f0e50a7c3407e0029a8b429d070f4c5bcb91e160eff2274b2830b0c016329a9cc0cd0c0192d79b19005e2c396905c6e719c169b15f49a022538ba52c30f77d2251d3c8c6186fb68b0f77bf424b6d7452ba4e6c71b29f2baeefa0d2332dfb45be077207b9920af780b4ad16fa944b50762e63c5e00ca224b343c25fc31e53590888585d0d88af2695b699d11127efb2c2c719dc7169afbbcc6c43a2e303c5236576586909b011443fc7ae89d5875fe4d012c0e5084bbf844d6400858a6c91a94f612285f81f24ce8b9b5b133e54fe6923ac4fa68a8e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfe}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x9f, 0x4, "499c3d6aed3d111cb6d8e645dae843b0a12fdff69ff7e5f091fc4cf4fe0f6f12cb75d27d1e714868d6de6c31fdd70f2c2c545588863836de44cec6b6de57e4bcd0a27da84e7ab351307444196c2241b0c9f687ded2c906e33969bb955a5865e12f253758d07dc60b352c903bd1e6aa5a790ad8b3c2018fd491613ab5095fe2f4e9cd94515dfd1486997ab2921a0e3b565eca4da919ac21e7e910f7"}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x87}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x7f}, @ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xff}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x800}, 0x804) sendto$inet6(r0, &(0x7f00000000c0)="bf7f1d630c04b457", 0x8, 0x1, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x72) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000000100)=0xcdde, 0x4) 21:23:15 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 21:23:15 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:15 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") [ 711.131100][T23919] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 711.147902][T23919] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 711.161809][T23919] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 711.200118][T23935] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 711.205241][T23942] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 711.222221][T23942] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 711.234678][T23942] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:15 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") [ 711.244072][T23946] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 711.259543][T23946] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 711.272355][T23946] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 711.369169][T23950] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 711.381835][T23950] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 711.395025][T23950] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:15 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs271vHEUbAPBn7+x8OXntN4SPOAGMAGHxYcdOgBQUgECiAAkJilAa24lMLjGKjUQiCwxFKCESPaJE4i+gggYBFRIt9ChShNwkUB3au137fLkzPvvsC+zvJ20yszunmWdn5252xxtAYY2k/yQRByPi14gYrGfXFxip/3drZWn6z5Wl6SSq1Tf+SGrlbq4sTedF888N5Jnlev5Yi3oXLl85P1WpzF7K8uOLF94dX7h85am5C1PnZs/NXpw8ffrUyYlnn5l8uitxpnHdHP5g/vjRV9669tr0mWtv//h1ksffFEeXjGx08NEuV9ZrhxrSSV8PG0JHyhGRdld/bfwPRjnWOm8wXv64p40DdlS1Wq3ubX94XxX4D0ui1y0AeiP/oU/vf/Ntl6Yed4QbL9RvgNK4b2Vb/UhflLIy/U33t900EhFnlv/6It1iZ55DAACs8206/3my1fyvFPc0lPtftoYyFBH/j4jDEXFXRByJiLsjamXvjYj7Oqy/eZHk9vlP6fqWAtukdP73XLa2tX7+l8/+Yqic5Q7V4u9Pzs5VZk9k52Q0+vem+YkN6vjupV8+bXescf6Xbmn9+Vwwa8f1vqYHdDNTi1PbibnRjY8ihvtaxZ+srgQkEXE0Ioa3WMfc418db3fsn+PfQBfWmapfRjxW7//laIo/l2y8Pjm+LyqzJ8bzq+J2P/189fV29W8r/i5I+/9Ay+t/Nf6hpHG9dqHzOq7+9knbe5qtXv97kjdr6T3ZvvenFhcvTUTsSV7N9j+/tn9y7bN5Pi+fxj/6cOvxfzjWzsSxiEgv4vsj4oGIeDBr+0MRMfDZxvH/8OIj72w9/p2Vxj/TUf93niif//6bdZUOdRJ/2v+naqnRbM9mvv8228Dtnj8AAAD4NyhFxMFISmOr6VJpbKz+N/xH4kCpMr+w+MTZ+fcuztTfERiK/lL+pGuw4XnoRHZbn+cnm/Ins+fGn5f31/Jj0/OVmV4HDwU30Gb8p34v97p1wI7zvhYUl/EPxWX8Q3EZ/1BcLcb//l60A9h9rX7/P+xBO4DdZ/4PxWX8Q3EZ/1Bcxj8U0nbe65cociJKd0QzJHYo0etvJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO74OwAA///RqeZ6") 21:23:15 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) (async) 21:23:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000020000000200000f70000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x20c2}], 0x1, &(0x7f0000000180), &(0x7f00000001c0)={[0x8]}, 0x8) dup(0xffffffffffffffff) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = timerfd_create(0x5, 0x80400) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) dup(r7) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) dup(r8) r9 = epoll_create1(0x80000) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)=[{&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x2fc}], 0x1, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, r1]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r5, r3, r6, r7]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r4, r8, r9]}}], 0xd8, 0x1}, 0x20010045) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'erspan0\x00', 0x0}) r10 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r10, 0x4c80, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x7, 0x8040) 21:23:15 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:15 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000800100"/24], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x20c2}], 0x1, &(0x7f0000000180), &(0x7f00000001c0)={[0x8]}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'erspan0\x00', 0x0}) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x8, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @exit, @ldst={0x1, 0x0, 0x6, 0x9, 0x3, 0x8}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000280)='GPL\x00', 0x1, 0xc5, &(0x7f0000000300)=""/197, 0x40f00, 0xa, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x4, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0x1]}, 0x80) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) [ 711.587484][T23955] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 711.602852][T23955] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 711.615309][T23955] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 711.633262][T23962] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 711.646408][T23962] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 712.063486][T23962] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:16 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x84ffe0, 0x0) 21:23:16 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 21:23:16 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:16 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs289vFFUcAPDv7LZFKNiK+IOCWqPGxh8tLagcPKjRhIMmJnrAY20LqSzU0JoIabR6wKOSeDceTfwLPOnFqCcTr3o3JMT0AnpaM7sz7bbs1m677SLz+SQD7828zXvfefN238zrBFBYw+k/ScT+iPg9Igbq2bUFhuv/3VxenPp7eXEqiWr1rb+SWrkby4tTedH8c/15ZqmeP9Kk3vlLl89NViozF7P82ML598fmL11+dvb85NmZszMXJk6ePHF8/IXnJ57rSJxpXDeGPpo7evjUO1ffmDp99d2fv03y+NfF0SHDGx18osOVdduBhnTS08WG0JZyRKTd1Vsb/wNRjtXOG4jXPu1q44AdVa1Wq6daH16qAnewJLrdAqA78h/69P4333Zp6nFbuP5y/QYojftmttWP9EQpK9O77v62k4Yj4vTSP1+lW+zMcwgAgDW+T+c/zzSb/5Xi/oZyd2drKIMRcU9EHIyIeyPiUETcF1Er+0BEPNhm/esXSW6d/5SubSmwTUrnfy9ma1tr53/57C8Gy1nuQC3+3uTMbGXmWHZORqJ3T5of36COH1797fNWxxrnf+mW1p/PBbN2XOvZs/Yz05MLk9uJudH1TyKGeprFn6ysBCQRcTgihrZYx+xT3xxtdey/499AB9aZql9HPFnv/6VYF38u2Xh9cuyuqMwcG8uvilv98uuVN1vVv634OyDt/31Nr/+V+AeTxvXa+fbruPLHZy3vabZ6/fclb9fSfdm+DycXFi6OR/Qlr2f7X1rdP7H62Tyfl0/jH3ms+fg/GKtn4khEpBfxQxHxcEQ8krX90Yjo/2Lj+H965fH3th7/zkrjn26r/9tPlM/9+N2aSgfbiT/t/xO11Ei2ZzPff5tt4HbPHwAAAPwflCJifySl0ZV0qTQ6Wv8b/kOxr1SZm194+szcBxem6+8IDEZvKX/SNdDwPHQ8u63P8xPr8sez58ZflvfW8qNTc5XpbgcPBdffYvyn/ix3u3XAjvO+FhSX8Q/FZfxDcRn/UFxNxv/ebrQD2H3Nfv8/7kI7gN1n/g/FZfxDcRn/UFzGPxTSdt7rlyhyIkq3RTMkdijR7W8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvg3AAD//0EB5zM=") 21:23:16 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(r0, &(0x7f0000000300)=""/147, 0x93, 0x160, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x0, 0x8000, 0xffffffa4, 0x10001, {{0x2c, 0x4, 0x2, 0x7, 0xb0, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast2, @multicast2, {[@generic={0x83, 0x3, "9e"}, @lsrr={0x83, 0x1b, 0x30, [@local, @rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2]}, @timestamp_addr={0x44, 0x3c, 0x42, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x48000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x6}, {@empty, 0x2}, {@multicast1}, {@multicast2, 0x4}, {@remote, 0x3}]}, @generic={0x86, 0x3, '^'}, @timestamp_prespec={0x44, 0x1c, 0xf5, 0x3, 0x6, [{@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x8}, {@broadcast, 0xffff}]}, @generic={0x86, 0x9, "10d7f09a8a1cc8"}, @end, @generic={0x94, 0xf, "c6ff2438a80ebab8e811d48fd7"}, @generic={0x44, 0x9, "aedde3e405ef6d"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:16 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000800100"/24], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x20c2}], 0x1, &(0x7f0000000180), &(0x7f00000001c0)={[0x8]}, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'erspan0\x00', 0x0}) (async, rerun: 32) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x8, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @exit, @ldst={0x1, 0x0, 0x6, 0x9, 0x3, 0x8}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000280)='GPL\x00', 0x1, 0xc5, &(0x7f0000000300)=""/197, 0x40f00, 0xa, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x4, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x1, 0x1]}, 0x80) (async) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 21:23:16 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(r0, &(0x7f0000000300)=""/147, 0x93, 0x160, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x0, 0x8000, 0xffffffa4, 0x10001, {{0x2c, 0x4, 0x2, 0x7, 0xb0, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast2, @multicast2, {[@generic={0x83, 0x3, "9e"}, @lsrr={0x83, 0x1b, 0x30, [@local, @rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2]}, @timestamp_addr={0x44, 0x3c, 0x42, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x48000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x6}, {@empty, 0x2}, {@multicast1}, {@multicast2, 0x4}, {@remote, 0x3}]}, @generic={0x86, 0x3, '^'}, @timestamp_prespec={0x44, 0x1c, 0xf5, 0x3, 0x6, [{@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x8}, {@broadcast, 0xffff}]}, @generic={0x86, 0x9, "10d7f09a8a1cc8"}, @end, @generic={0x94, 0xf, "c6ff2438a80ebab8e811d48fd7"}, @generic={0x44, 0x9, "aedde3e405ef6d"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:16 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 712.524637][T23983] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 712.551643][T23983] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) 21:23:16 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(r0, &(0x7f0000000300)=""/147, 0x93, 0x160, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x0, 0x8000, 0xffffffa4, 0x10001, {{0x2c, 0x4, 0x2, 0x7, 0xb0, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast2, @multicast2, {[@generic={0x83, 0x3, "9e"}, @lsrr={0x83, 0x1b, 0x30, [@local, @rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2]}, @timestamp_addr={0x44, 0x3c, 0x42, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x48000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x6}, {@empty, 0x2}, {@multicast1}, {@multicast2, 0x4}, {@remote, 0x3}]}, @generic={0x86, 0x3, '^'}, @timestamp_prespec={0x44, 0x1c, 0xf5, 0x3, 0x6, [{@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x8}, {@broadcast, 0xffff}]}, @generic={0x86, 0x9, "10d7f09a8a1cc8"}, @end, @generic={0x94, 0xf, "c6ff2438a80ebab8e811d48fd7"}, @generic={0x44, 0x9, "aedde3e405ef6d"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:16 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 21:23:16 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) recvfrom$unix(r0, &(0x7f0000000300)=""/147, 0x93, 0x160, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:16 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) [ 712.551773][T23979] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 712.564364][T23983] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 712.584117][T23979] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 712.597650][T23979] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:17 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x84ffe0, 0x0) pipe(&(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0x84ffe0, 0x0) (async) 21:23:17 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:17 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:17 executing program 5: prctl$PR_GET_THP_DISABLE(0x2a) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r3 = dup(r0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, r2) r6 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r7) syz_open_dev$vcsu(&(0x7f0000000080), 0x101, 0x400) 21:23:17 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x40, 0x8, 0xc5c, 0x0, 0x2, 0x2, 0x5, 0x5}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000080010000000000000000000000000000347520b008d9baa58379147f045992513badfe8780933b29eafe27f88b5a6e3d08ba09974c44bb13a143f242865fef0a4b34df0772b5ff135f0c456136"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x20c2}], 0x1, &(0x7f0000000180), &(0x7f00000001c0)={[0x8]}, 0x8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r5 = dup(r4) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x0, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@deltfilter={0x44, 0x2d, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0xb, 0xc}, {0xfffd, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4}, 0x48091) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'erspan0\x00', 0x0}) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) 21:23:17 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:17 executing program 5: prctl$PR_GET_THP_DISABLE(0x2a) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r3 = dup(r0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, r2) r6 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r7) syz_open_dev$vcsu(&(0x7f0000000080), 0x101, 0x400) prctl$PR_GET_THP_DISABLE(0x2a) (async) openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async) dup(r0) (async) pipe2$watch_queue(&(0x7f0000000000), 0x80) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r2) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) (async) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) (async) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) (async) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r7) (async) syz_open_dev$vcsu(&(0x7f0000000080), 0x101, 0x400) (async) [ 713.275365][T24016] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 713.288342][T24016] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 713.301166][T24015] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr 21:23:17 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 713.319493][T24016] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 713.330529][T24015] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 713.344154][T24015] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 713.450748][T24035] x_tables: duplicate underflow at hook 1 21:23:17 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x80) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getneigh={0x14, 0x1e, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:17 executing program 5: prctl$PR_GET_THP_DISABLE(0x2a) (async) r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async) r3 = dup(r0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r5 = ioctl$LOOP_CTL_ADD(r3, 0x4c80, r2) r6 = ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r6) (async) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) (async) r7 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r7) (async, rerun: 32) syz_open_dev$vcsu(&(0x7f0000000080), 0x101, 0x400) (rerun: 32) 21:23:17 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") [ 713.770377][T24052] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 713.782946][T24052] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 713.795802][T24052] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:18 executing program 1: pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x84ffe0, 0x0) 21:23:18 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs289vFFUcAPDv7LZFKNiK+IOCWqPGxh8tLagcPKjRxAMmJnrAY20LqSzU0JoIabR6wKOSeDceTfwLPOnFqCcTr3o3JMT0AnpaM7sz7bbs1m677SLz+SQD7828zXvfefN238zrBFBYw+k/ScT+iPg9Igbq2bUFhuv/3VxenPp7eXEqiWr1rb+SWrkby4tTedH8c/15ZqmeP9Kk3vlLl89NViozF7P82ML598fmL11+dvb85NmZszMXJk6ePHF8/IXnJ57rSJxpXDeGPpo7evj1d66+MXX66rs/f5vk8a+Lo0OGNzr4RIcr67YDDemkp4sNoS3liEi7q7c2/geiHKudNxCvfdrVxgE7qlqtVk+1PrxUBe5gSXS7BUB35D/06f1vvu3S1OO2cP3l+g1QGvfNbKsf6YlSVqZ33f1tJw1HxOmlf75Kt9iZ5xAAAGt8n85/nmk2/yvF/Q3l7s7WUAYj4p6IOBgR90bEoYi4L6JW9oGIeLDN+tcvktw6/yld21Jgm5TO/17M1rbWzv/y2V8MlrPcgVr8vcmZ2crMseycjETvnjQ/vkEdP7z62+etjjXO/9ItrT+fC2btuNazZ+1npicXJrcTc6Prn0QM9TSLP1lZCUgi4nBEDG2xjtmnvjna6th/x7+BDqwzVb+OeLLe/0uxLv5csvH65NhdUZk5NpZfFbf65dcrb7aqf1vxd0Da//uaXv8r8Q8mjeu18+3XceWPz1re02z1+u9L3q6l+7J9H04uLFwcj+hLTmX7X1rdP7H62Tyfl0/jH3ms+fg/GKtn4khEpBfxQxHxcEQ8krX90Yjo/2Lj+H965fH3th7/zkrjn26r/9tPlM/9+N2aSgfbiT/t/xO11Ei2ZzPff5tt4HbPHwAAAPwflCJifySl0ZV0qTQ6Wv8b/kOxr1SZm194+szcBxem6+8IDEZvKX/SNdDwPHQ8u63P8xPr8sez58ZflvfW8qNTc5XpbgcPBdffYvyn/ix3u3XAjvO+FhSX8Q/FZfxDcRn/UFxNxv/ebrQD2H3Nfv8/7kI7gN1n/g/FZfxDcRn/UFzGPxTSdt7rlyhyIkq3RTMkdijR7W8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvg3AAD//xHh5zc=") 21:23:18 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:18 executing program 3: accept(0xffffffffffffffff, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x80) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:18 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 21:23:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x40, 0x8, 0xc5c, 0x0, 0x2, 0x2, 0x5, 0x5}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000080010000000000000000000000000000347520b008d9baa58379147f045992513badfe8780933b29eafe27f88b5a6e3d08ba09974c44bb13a143f242865fef0a4b34df0772b5ff135f0c456136"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x20c2}], 0x1, &(0x7f0000000180), &(0x7f00000001c0)={[0x8]}, 0x8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r5 = dup(r4) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x0, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@deltfilter={0x44, 0x2d, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0xb, 0xc}, {0xfffd, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4}, 0x48091) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'erspan0\x00', 0x0}) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) 21:23:18 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:18 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) (async) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 714.206289][T24065] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 714.213874][T24064] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 714.223019][T24065] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 714.238738][T24064] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) 21:23:18 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 714.243256][T24065] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 714.262969][T24064] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 714.319430][T24083] x_tables: duplicate underflow at hook 1 21:23:18 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:18 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 21:23:18 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:18 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:18 executing program 5: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs271vHEUbAPBn7+zkTZy8NiF8xAlgBAiLDzt2AqSgIAgkCpCQoAilsZ3I5BKj2EgkssBQhBIi0SNKJP4CKmgQUCHRQo8iRchNAtWhvdu1z86d8dl3vsD+ftImM7tzmnl2du5md7wBFNZI+k8ScSAifo2IwXp2fYGR+n+3Vpam/1xZmk6iWn3jj6RW7ubK0nReNP/cQJ5ZruePNql34fKV81OVyuylLD++eOHd8YXLV56euzB1bvbc7MXJU6dOnph47tnJZzoSZxrXzeEP5o8deeWta69Nn7n29o9fJ3n8G+LokJHNDj7W4cp67XRDOunrYUNoSzki0u7qr43/wSjHWucNxssf97RxQFdVq9Xq3taHl6vAf1gSvW4B0Bv5D316/5tvuzT1uCPcOF2/AUrjvpVt9SN9UcrKpPdGB7tU/0hEnFn+64t0i+48hwAAWOfbdP7zVLP5XynubSj3/2wNZSgi7oqIQxFxd0Qcjoh7Impl74uI+9usf+Miye3zn9L1bQW2Ren87/lsbWv9/C+f/cVQOcsdrMXfn5ydq8wez87JaPTvTfMTm9Tx3Uu/fNrqWOP8L93S+vO5YNaO630bHtDNTC1O7STmRjc+ihjuaxZ/sroSkETEkYgY3mYdc098dazVsX+OfxMdWGeqfhnxeL3/l2ND/Llk8/XJ8f9FZfb4eH5V3O6nn6++3qr+HcXfAWn/7296/a/GP5Q0rtcutF/H1d8+aXlPs93rf0/yZi29J9v3/tTi4qWJiD3Jq9n+F9b2T659Ns/n5dP4Rx9pPv4PxdqZOBoR6UX8QEQ8GBEPZW1/OCIGPts8/h9efPSd7cffXWn8M231f/uJ8vnvv1lX6VA78af9f7KWGs32bOX7b6sN3On5AwAAgH+DUkQciKQ0tpoulcbG6n/Dfzj2lyrzC4tPnp1/7+JM/R2Boegv5U+6Bhueh05kt/V5fnJD/kT23Pjz8r5afmx6vjLT6+Ch4AZajP/U7+Vetw7oOu9rQXEZ/1Bcxj8Ul/EPxdVk/O/rRTuA3dfs9//DHrQD2H3m/1Bcxj8Ul/EPxWX8QyHt5L1+iSInonRHNEOiS4lefzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xt8BAAD//wR35yY=") 21:23:18 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:18 executing program 3: socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:18 executing program 3: socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x40, 0x8, 0xc5c, 0x0, 0x2, 0x2, 0x5, 0x5}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000080010000000000000000000000000000347520b008d9baa58379147f045992513badfe8780933b29eafe27f88b5a6e3d08ba09974c44bb13a143f242865fef0a4b34df0772b5ff135f0c456136"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x20c2}], 0x1, &(0x7f0000000180), &(0x7f00000001c0)={[0x8]}, 0x8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r5 = dup(r4) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x0, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@deltfilter={0x44, 0x2d, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x5}, {0xb, 0xc}, {0xfffd, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4}, 0x48091) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'erspan0\x00', 0x0}) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) [ 715.023979][T24097] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 715.044253][T24097] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) 21:23:18 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1f3cd45b4043b97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) r6 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r8, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r8, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1f3cd45b4043b97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000002740)=0x0) read$FUSE(r0, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r14 = syz_open_dev$vcsa(&(0x7f0000000140), 0x6, 0x0) open_tree(r14, &(0x7f0000000540)='./file0\x00', 0x10800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002700)=[{&(0x7f0000000280)={0xdc, 0x3c, 0x200, 0x70bd26, 0x25dfdbfd, "", [@generic="bf31ab3fab1018fc9cbd9ec9d7a824b48f091c3411a3f25d7133be77cd0718d7982009526ec915113f908990e43ea3818a8e3dcb2fce141cc7c99484a8935b96113f5ab57d7885f6cbd672ac090f77edb05fb6d8e358a709ed401bbe7ab0827200b8aeac72a8d5bed58aba58d7c77dd7326e87b1bce24b54dfa86f5298c262b12c45661fa708edd307ef35e6eeacbeeaeaa9e53f55604e70ce7282a578d60e7586bbdfb3441af8df9c63b29492", @generic="016de536f6b3340719a62ea15ec4828ff0df45d274b91f5d69ec2e08f3c1"]}, 0xdc}, {&(0x7f0000000380)={0x1ac, 0x25, 0xc, 0x70bd28, 0x25dfdbfc, "", [@typed={0x14, 0x58, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x50, 0x69, 0x0, 0x1, [@generic="f144da191f26e0affa6571f8e6bfc22f0b37aec431bccd4dfd219b66af73914de55026524d4804c1fb080a7fb5730b8118fb4be721e69090829318dd1e3a7da4b540169db601e1e9dc892be9"]}, @generic="627f64cb33253c1b6424cb999f3d69f7f5d2510a6098cbbb9d613954cd9107bf69f331d02ee6893db2853492a76cfe96d492e605daf89417e5ac35a7f6cc3f815794a33b5a645f3e7ff549a0068a1e245e9cf532fa60c35f94912ed3172cb7bae90c6a5780552267d19d066ab2d1bd9164c8ed8955ec988241732753e16d8079e0dc02cee44ff3fb8e8c0d0e6402ad29ad47f4d212e82d46baf6d8ca096915842d648abf6a97b1614762d7", @typed={0x8, 0x7f, 0x0, 0x0, @fd}, @nested={0x82, 0x50, 0x0, 0x1, [@generic="e9256693ad2fe08634b103117ed3e218b3e58c158ee1c7810c2f5a419deb59da142b15cb989352ee017ebb9abc525348e117996feba88cb4fce8b74d3fc071525aa6e5447b10b43641dc26d0beef532f0f5cd2d4d8446a7f23451d55dc41afdd486775fe1cb8b71b8fd3a03ab778ff2b80e87a20458432dca0804c43aa34"]}]}, 0x1ac}, {&(0x7f0000002580)={0x128, 0x3e, 0x100, 0x70bd2d, 0x1e, "", [@nested={0x8c, 0x52, 0x0, 0x1, [@generic="87", @generic, @typed={0x8, 0x80, 0x0, 0x0, @fd}, @typed={0x8, 0x24, 0x0, 0x0, @pid}, @generic="221fe59298d99a9ef66973bb9e11fbebdd877494c22e9714a51e911fe7371dab4fcb7d647b92a62cfb31f5db4551ec062b5b13d3dac596e249783fa54563d7a356da8a8dba7ee856d552a08b2116e3b1177b4e02302e12645034c3f83c7ea33ac7dad18559b309", @typed={0x8, 0x38, 0x0, 0x0, @pid}, @typed={0x8, 0x6, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @nested={0x8c, 0x41, 0x0, 0x1, [@generic="7f74b010ca4e062c5c28101698", @generic="7b57d9d2404b3621c6bba87e77fe88a39857344ccf619c14760459fbdcdee5a87a38be44e369d6dd3f04704edb5cdba9ed5e27b8f8f603a7edf79a191dd8644a78a224a632aefea47bd8148cfc949271541d4550f2a909", @typed={0x8, 0x80, 0x0, 0x0, @u32=0xd8000000}, @typed={0x4, 0x88}, @typed={0x8, 0x7, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x17, 0x0, 0x0, @uid}, @typed={0x8, 0x37, 0x0, 0x0, @pid}]}]}, 0x128}, {&(0x7f00000026c0)={0x1c, 0x22, 0x5c95c278031ee709, 0x70bd26, 0x25dfdbfb, "", [@typed={0xc, 0x54, 0x0, 0x0, @u64=0x2ea}]}, 0x1c}], 0x4, &(0x7f00000047c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r9, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r14, r1]}}], 0xc0, 0x4000880}, 0x810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) r15 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x12, r15, 0x3f9f4000) 21:23:18 executing program 3: socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 715.072666][T24097] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 715.084989][T24100] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 715.109665][T24100] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) 21:23:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 21:23:19 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") [ 715.119879][T24103] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.5: corrupted in-inode xattr [ 715.125516][T24100] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 715.134541][T24103] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 715.155698][T24103] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 715.270624][T24127] x_tables: duplicate underflow at hook 1 21:23:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 21:23:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x3}, {0xffffffffffffffff, 0x1, 0x1}, 0x7f, 0xf8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x2000000) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000700)=@get={0x1, &(0x7f0000000600)=""/196}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @private0, @empty}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f00000005c0)={0x0, 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'pim6reg\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000001500000227bd5000fcdbdf250a1801fc", @ANYRES32=0x0, @ANYBLOB="0800090027000000080009009a170000140006000700000020000000018000000400000008000a000400000008000900e2fc000008000900010000001400060001040000050000001f0000000200000008000a00030000000800090005000000"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x20000005) 21:23:19 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', 0x0}) 21:23:19 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") [ 715.597305][T24125] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 715.607575][T24136] x_tables: duplicate underflow at hook 3 [ 715.616751][T24125] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) 21:23:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', 0x0}) [ 715.638321][T24134] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 715.651599][T24125] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 715.664751][T24134] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 715.677698][T24134] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 715.709655][T24142] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 715.717690][T24142] System zones: 1-12 [ 715.722553][T24142] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.5: corrupted in-inode xattr [ 715.735804][T24142] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz-executor.5: couldn't read orphan inode 15 (err -117) [ 715.771260][T24142] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 21:23:19 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:19 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs271vHEUbAPBn7+zkTZy8NiF8xAlgBAiLDzt2AqSgAAQSBUhIUARRGduJTC4xio1EIgsMRSghEj2iROIvoIIGARUSLfQoUoTcJFAd2rtd+3y5Mz777Avs7ydtMrM7p5lnZ+dudscbQGGNpP8kEQci4teIGKxn1xcYqf93c2Vp+s+VpekkqtXX/0hq5W6sLE3nRfPPDeSZ5Xr+aIt6Fy5dPjdVqcxezPLji+ffHV+4dPnJufNTZ2fPzl6YPHXq5ImJZ56efKorcaZx3Rj+YP7YkZffvPrq9Omrb//4dZLH3xRHl4xsdPCRLlfWawcb0klfDxtCR8oRkXZXf238D0Y51jpvMF76uKeNA3ZUtVqt7m1/+K0q8B+WRK9bAPRG/kOf3v/m2y5NPW4L15+v3wClcd/MtvqRvihlZfqb7m+7aSQiTi//9UW6xc48hwAAWOfbdP7zRKv5Xynubij3/2wNZSgi7oiIQxFxZ0Qcjoi7Impl74mIezusv3mR5Nb5T+nalgLbpHT+92y2trV+/pfP/mKonOUO1uLvT87MVWaPZ+dkNPr3pvmJDer47sVfPm13rHH+l25p/flcMGvHtb6mB3QzU4tT24m50fWPIob7WsWfrK4EJBFxJCKGt1jH3GNfHWt37J/j30AX1pmqX0Y8Wu//5WiKP5dsvD45/r+ozB4fz6+KW/3085XX2tW/rfi7IO3//S2v/9X4h5LG9dqFzuu48tsnbe9ptnr970neqKX3ZPven1pcvDgRsSd5Jdv/3Nr+ybXP5vm8fBr/6EOtx/+hWDsTRyMivYjvi4j7I+KBrO0PRsTAZxvH/8MLD7+z9fh3Vhr/TEf933mifO77b9ZVOtRJ/Gn/n6ylRrM9m/n+22wDt3v+AAAA4N+gFBEHIimNraZLpbGx+t/wH479pcr8wuLjZ+bfuzBTf0dgKPpL+ZOuwYbnoRPZbX2en2zKn8ieG39e3lfLj03PV2Z6HTwU3ECb8Z/6vdzr1gE7zvtaUFzGPxSX8Q/FZfxDcbUY//t60Q5g97X6/f+wB+0Adp/5PxSX8Q/FZfxDcRn/UEjbea9fosiJKN0WzZDYoUSvv5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC64+8AAAD///bU5s0=") 21:23:19 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', 0x0}) 21:23:19 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:19 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:19 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000a80)) (async) fstat(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1f3cd45b4043b97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) getpid() (async) r6 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() (async) r9 = gettid() connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r8, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r8, &(0x7f0000000d80)) (async) fstat(r8, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1f3cd45b4043b97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000002740)=0x0) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r14 = syz_open_dev$vcsa(&(0x7f0000000140), 0x6, 0x0) open_tree(r14, &(0x7f0000000540)='./file0\x00', 0x10800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002700)=[{&(0x7f0000000280)={0xdc, 0x3c, 0x200, 0x70bd26, 0x25dfdbfd, "", [@generic="bf31ab3fab1018fc9cbd9ec9d7a824b48f091c3411a3f25d7133be77cd0718d7982009526ec915113f908990e43ea3818a8e3dcb2fce141cc7c99484a8935b96113f5ab57d7885f6cbd672ac090f77edb05fb6d8e358a709ed401bbe7ab0827200b8aeac72a8d5bed58aba58d7c77dd7326e87b1bce24b54dfa86f5298c262b12c45661fa708edd307ef35e6eeacbeeaeaa9e53f55604e70ce7282a578d60e7586bbdfb3441af8df9c63b29492", @generic="016de536f6b3340719a62ea15ec4828ff0df45d274b91f5d69ec2e08f3c1"]}, 0xdc}, {&(0x7f0000000380)={0x1ac, 0x25, 0xc, 0x70bd28, 0x25dfdbfc, "", [@typed={0x14, 0x58, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x50, 0x69, 0x0, 0x1, [@generic="f144da191f26e0affa6571f8e6bfc22f0b37aec431bccd4dfd219b66af73914de55026524d4804c1fb080a7fb5730b8118fb4be721e69090829318dd1e3a7da4b540169db601e1e9dc892be9"]}, @generic="627f64cb33253c1b6424cb999f3d69f7f5d2510a6098cbbb9d613954cd9107bf69f331d02ee6893db2853492a76cfe96d492e605daf89417e5ac35a7f6cc3f815794a33b5a645f3e7ff549a0068a1e245e9cf532fa60c35f94912ed3172cb7bae90c6a5780552267d19d066ab2d1bd9164c8ed8955ec988241732753e16d8079e0dc02cee44ff3fb8e8c0d0e6402ad29ad47f4d212e82d46baf6d8ca096915842d648abf6a97b1614762d7", @typed={0x8, 0x7f, 0x0, 0x0, @fd}, @nested={0x82, 0x50, 0x0, 0x1, [@generic="e9256693ad2fe08634b103117ed3e218b3e58c158ee1c7810c2f5a419deb59da142b15cb989352ee017ebb9abc525348e117996feba88cb4fce8b74d3fc071525aa6e5447b10b43641dc26d0beef532f0f5cd2d4d8446a7f23451d55dc41afdd486775fe1cb8b71b8fd3a03ab778ff2b80e87a20458432dca0804c43aa34"]}]}, 0x1ac}, {&(0x7f0000002580)={0x128, 0x3e, 0x100, 0x70bd2d, 0x1e, "", [@nested={0x8c, 0x52, 0x0, 0x1, [@generic="87", @generic, @typed={0x8, 0x80, 0x0, 0x0, @fd}, @typed={0x8, 0x24, 0x0, 0x0, @pid}, @generic="221fe59298d99a9ef66973bb9e11fbebdd877494c22e9714a51e911fe7371dab4fcb7d647b92a62cfb31f5db4551ec062b5b13d3dac596e249783fa54563d7a356da8a8dba7ee856d552a08b2116e3b1177b4e02302e12645034c3f83c7ea33ac7dad18559b309", @typed={0x8, 0x38, 0x0, 0x0, @pid}, @typed={0x8, 0x6, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @nested={0x8c, 0x41, 0x0, 0x1, [@generic="7f74b010ca4e062c5c28101698", @generic="7b57d9d2404b3621c6bba87e77fe88a39857344ccf619c14760459fbdcdee5a87a38be44e369d6dd3f04704edb5cdba9ed5e27b8f8f603a7edf79a191dd8644a78a224a632aefea47bd8148cfc949271541d4550f2a909", @typed={0x8, 0x80, 0x0, 0x0, @u32=0xd8000000}, @typed={0x4, 0x88}, @typed={0x8, 0x7, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x17, 0x0, 0x0, @uid}, @typed={0x8, 0x37, 0x0, 0x0, @pid}]}]}, 0x128}, {&(0x7f00000026c0)={0x1c, 0x22, 0x5c95c278031ee709, 0x70bd26, 0x25dfdbfb, "", [@typed={0xc, 0x54, 0x0, 0x0, @u64=0x2ea}]}, 0x1c}], 0x4, &(0x7f00000047c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r9, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r14, r1]}}], 0xc0, 0x4000880}, 0x810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) r15 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x12, r15, 0x3f9f4000) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x12, r15, 0x3f9f4000) 21:23:19 executing program 3: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") [ 715.979126][T24149] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 715.999428][T24149] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 716.007404][T24151] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr 21:23:19 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") [ 716.012442][T24149] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 716.038506][T24154] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.5: corrupted in-inode xattr [ 716.042905][T24151] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 716.066151][T24154] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz-executor.5: couldn't read orphan inode 15 (err -117) 21:23:19 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) (fail_nth: 1) [ 716.070534][T24151] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 716.082404][T24164] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 716.100085][T24154] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 716.110220][T24164] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 716.118746][T24176] FAULT_INJECTION: forcing a failure. [ 716.118746][T24176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.123213][T24164] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 716.135608][T24176] CPU: 1 PID: 24176 Comm: syz-executor.0 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 716.135617][T24176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 716.135621][T24176] Call Trace: [ 716.135647][T24176] dump_stack_lvl+0x1e2/0x24b [ 716.174389][T24176] ? bfq_pos_tree_add_move+0x43e/0x43e [ 716.179841][T24176] dump_stack+0x15/0x17 [ 716.183990][T24176] should_fail+0x3c0/0x510 [ 716.188402][T24176] should_fail_usercopy+0x1a/0x20 [ 716.193419][T24176] _copy_from_user+0x20/0xd0 [ 716.198003][T24176] sock_ioctl+0x64d/0x770 [ 716.202323][T24176] ? sock_poll+0x310/0x310 [ 716.206734][T24176] ? __fget_files+0x310/0x370 [ 716.211408][T24176] ? security_file_ioctl+0xb1/0xd0 [ 716.216514][T24176] ? sock_poll+0x310/0x310 [ 716.220921][T24176] __se_sys_ioctl+0x115/0x190 [ 716.225589][T24176] __x64_sys_ioctl+0x7b/0x90 [ 716.230174][T24176] do_syscall_64+0x34/0x70 [ 716.234582][T24176] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 716.240463][T24176] RIP: 0033:0x7f7415f9e0f9 [ 716.244881][T24176] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 716.264491][T24176] RSP: 002b:00007f7414d11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:23:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) (fail_nth: 2) [ 716.272915][T24176] RAX: ffffffffffffffda RBX: 00007f74160bdf80 RCX: 00007f7415f9e0f9 [ 716.280881][T24176] RDX: 0000000020000540 RSI: 00000000000089f3 RDI: 0000000000000003 [ 716.288872][T24176] RBP: 00007f7414d111d0 R08: 0000000000000000 R09: 0000000000000000 [ 716.296850][T24176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.304830][T24176] R13: 00007ffe84f92d9f R14: 00007f7414d11300 R15: 0000000000022000 [ 716.328908][T24178] FAULT_INJECTION: forcing a failure. [ 716.328908][T24178] name failslab, interval 1, probability 0, space 0, times 0 [ 716.341804][T24178] CPU: 0 PID: 24178 Comm: syz-executor.0 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 716.353523][T24178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 716.363582][T24178] Call Trace: [ 716.366883][T24178] dump_stack_lvl+0x1e2/0x24b [ 716.371560][T24178] ? panic+0x7d7/0x7d7 [ 716.375616][T24178] ? bfq_pos_tree_add_move+0x43e/0x43e [ 716.381087][T24178] dump_stack+0x15/0x17 [ 716.385235][T24178] should_fail+0x3c0/0x510 [ 716.389815][T24178] ? __request_module+0x254/0x870 [ 716.394849][T24178] __should_failslab+0x9f/0xe0 [ 716.399692][T24178] should_failslab+0x9/0x20 [ 716.404181][T24178] kmem_cache_alloc_trace+0x3a/0x330 [ 716.409452][T24178] ? dev_load+0x5d/0xc0 [ 716.413595][T24178] __request_module+0x254/0x870 [ 716.418430][T24178] ? capable+0x79/0xe0 [ 716.422496][T24178] ? asan.module_ctor+0x10/0x10 [ 716.427335][T24178] ? selinux_capable+0x39/0x50 [ 716.432095][T24178] ? security_capable+0xb2/0xd0 [ 716.436975][T24178] dev_load+0x5d/0xc0 [ 716.440985][T24178] dev_ioctl+0x5a8/0xae0 [ 716.445235][T24178] sock_ioctl+0x68a/0x770 [ 716.449592][T24178] ? sock_poll+0x310/0x310 [ 716.454013][T24178] ? __fget_files+0x310/0x370 [ 716.458714][T24178] ? security_file_ioctl+0xb1/0xd0 [ 716.463848][T24178] ? sock_poll+0x310/0x310 [ 716.468255][T24178] __se_sys_ioctl+0x115/0x190 [ 716.472926][T24178] __x64_sys_ioctl+0x7b/0x90 [ 716.477535][T24178] do_syscall_64+0x34/0x70 [ 716.481944][T24178] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 716.487828][T24178] RIP: 0033:0x7f7415f9e0f9 [ 716.492231][T24178] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 716.511953][T24178] RSP: 002b:00007f7414d11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.520362][T24178] RAX: ffffffffffffffda RBX: 00007f74160bdf80 RCX: 00007f7415f9e0f9 21:23:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) (fail_nth: 3) 21:23:20 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") [ 716.528330][T24178] RDX: 0000000020000540 RSI: 00000000000089f3 RDI: 0000000000000003 [ 716.536301][T24178] RBP: 00007f7414d111d0 R08: 0000000000000000 R09: 0000000000000000 [ 716.544286][T24178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.552248][T24178] R13: 00007ffe84f92d9f R14: 00007f7414d11300 R15: 0000000000022000 [ 716.577139][T24180] FAULT_INJECTION: forcing a failure. [ 716.577139][T24180] name failslab, interval 1, probability 0, space 0, times 0 [ 716.589970][T24180] CPU: 1 PID: 24180 Comm: syz-executor.0 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 716.601719][T24180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 716.611864][T24180] Call Trace: [ 716.615155][T24180] dump_stack_lvl+0x1e2/0x24b [ 716.619937][T24180] ? bfq_pos_tree_add_move+0x43e/0x43e [ 716.625514][T24180] dump_stack+0x15/0x17 [ 716.629682][T24180] should_fail+0x3c0/0x510 [ 716.634093][T24180] ? __request_module+0x270/0x870 [ 716.639106][T24180] __should_failslab+0x9f/0xe0 [ 716.643859][T24180] should_failslab+0x9/0x20 [ 716.648364][T24180] __kmalloc_track_caller+0x5f/0x350 [ 716.653638][T24180] ? __kasan_kmalloc+0x9/0x10 [ 716.658312][T24180] ? kmem_cache_alloc_trace+0x1dd/0x330 [ 716.663861][T24180] kstrdup+0x34/0x70 [ 716.667801][T24180] __request_module+0x270/0x870 [ 716.672784][T24180] ? capable+0x79/0xe0 [ 716.676845][T24180] ? asan.module_ctor+0x10/0x10 [ 716.681692][T24180] ? selinux_capable+0x39/0x50 [ 716.686444][T24180] ? security_capable+0xb2/0xd0 [ 716.691314][T24180] dev_load+0x5d/0xc0 [ 716.695287][T24180] dev_ioctl+0x5a8/0xae0 [ 716.699518][T24180] sock_ioctl+0x68a/0x770 [ 716.703843][T24180] ? sock_poll+0x310/0x310 [ 716.708269][T24180] ? __fget_files+0x310/0x370 [ 716.712968][T24180] ? security_file_ioctl+0xb1/0xd0 [ 716.718119][T24180] ? sock_poll+0x310/0x310 [ 716.722523][T24180] __se_sys_ioctl+0x115/0x190 [ 716.727201][T24180] __x64_sys_ioctl+0x7b/0x90 [ 716.731791][T24180] do_syscall_64+0x34/0x70 [ 716.736205][T24180] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 716.742098][T24180] RIP: 0033:0x7f7415f9e0f9 [ 716.746510][T24180] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 716.766116][T24180] RSP: 002b:00007f7414d11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.774528][T24180] RAX: ffffffffffffffda RBX: 00007f74160bdf80 RCX: 00007f7415f9e0f9 21:23:20 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) (fail_nth: 4) 21:23:20 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:20 executing program 1: pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000d80)) (async) fstat(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1f3cd45b4043b97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) r6 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r8, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r8, &(0x7f0000000d80)) (async) fstat(r8, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1f3cd45b4043b97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000002740)=0x0) read$FUSE(r0, &(0x7f0000002780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_dev$vcsa(&(0x7f0000000140), 0x6, 0x0) (async) r14 = syz_open_dev$vcsa(&(0x7f0000000140), 0x6, 0x0) open_tree(r14, &(0x7f0000000540)='./file0\x00', 0x10800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004880)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002700)=[{&(0x7f0000000280)={0xdc, 0x3c, 0x200, 0x70bd26, 0x25dfdbfd, "", [@generic="bf31ab3fab1018fc9cbd9ec9d7a824b48f091c3411a3f25d7133be77cd0718d7982009526ec915113f908990e43ea3818a8e3dcb2fce141cc7c99484a8935b96113f5ab57d7885f6cbd672ac090f77edb05fb6d8e358a709ed401bbe7ab0827200b8aeac72a8d5bed58aba58d7c77dd7326e87b1bce24b54dfa86f5298c262b12c45661fa708edd307ef35e6eeacbeeaeaa9e53f55604e70ce7282a578d60e7586bbdfb3441af8df9c63b29492", @generic="016de536f6b3340719a62ea15ec4828ff0df45d274b91f5d69ec2e08f3c1"]}, 0xdc}, {&(0x7f0000000380)={0x1ac, 0x25, 0xc, 0x70bd28, 0x25dfdbfc, "", [@typed={0x14, 0x58, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x50, 0x69, 0x0, 0x1, [@generic="f144da191f26e0affa6571f8e6bfc22f0b37aec431bccd4dfd219b66af73914de55026524d4804c1fb080a7fb5730b8118fb4be721e69090829318dd1e3a7da4b540169db601e1e9dc892be9"]}, @generic="627f64cb33253c1b6424cb999f3d69f7f5d2510a6098cbbb9d613954cd9107bf69f331d02ee6893db2853492a76cfe96d492e605daf89417e5ac35a7f6cc3f815794a33b5a645f3e7ff549a0068a1e245e9cf532fa60c35f94912ed3172cb7bae90c6a5780552267d19d066ab2d1bd9164c8ed8955ec988241732753e16d8079e0dc02cee44ff3fb8e8c0d0e6402ad29ad47f4d212e82d46baf6d8ca096915842d648abf6a97b1614762d7", @typed={0x8, 0x7f, 0x0, 0x0, @fd}, @nested={0x82, 0x50, 0x0, 0x1, [@generic="e9256693ad2fe08634b103117ed3e218b3e58c158ee1c7810c2f5a419deb59da142b15cb989352ee017ebb9abc525348e117996feba88cb4fce8b74d3fc071525aa6e5447b10b43641dc26d0beef532f0f5cd2d4d8446a7f23451d55dc41afdd486775fe1cb8b71b8fd3a03ab778ff2b80e87a20458432dca0804c43aa34"]}]}, 0x1ac}, {&(0x7f0000002580)={0x128, 0x3e, 0x100, 0x70bd2d, 0x1e, "", [@nested={0x8c, 0x52, 0x0, 0x1, [@generic="87", @generic, @typed={0x8, 0x80, 0x0, 0x0, @fd}, @typed={0x8, 0x24, 0x0, 0x0, @pid}, @generic="221fe59298d99a9ef66973bb9e11fbebdd877494c22e9714a51e911fe7371dab4fcb7d647b92a62cfb31f5db4551ec062b5b13d3dac596e249783fa54563d7a356da8a8dba7ee856d552a08b2116e3b1177b4e02302e12645034c3f83c7ea33ac7dad18559b309", @typed={0x8, 0x38, 0x0, 0x0, @pid}, @typed={0x8, 0x6, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @nested={0x8c, 0x41, 0x0, 0x1, [@generic="7f74b010ca4e062c5c28101698", @generic="7b57d9d2404b3621c6bba87e77fe88a39857344ccf619c14760459fbdcdee5a87a38be44e369d6dd3f04704edb5cdba9ed5e27b8f8f603a7edf79a191dd8644a78a224a632aefea47bd8148cfc949271541d4550f2a909", @typed={0x8, 0x80, 0x0, 0x0, @u32=0xd8000000}, @typed={0x4, 0x88}, @typed={0x8, 0x7, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x17, 0x0, 0x0, @uid}, @typed={0x8, 0x37, 0x0, 0x0, @pid}]}]}, 0x128}, {&(0x7f00000026c0)={0x1c, 0x22, 0x5c95c278031ee709, 0x70bd26, 0x25dfdbfb, "", [@typed={0xc, 0x54, 0x0, 0x0, @u64=0x2ea}]}, 0x1c}], 0x4, &(0x7f00000047c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee00}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r9, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r14, r1]}}], 0xc0, 0x4000880}, 0x810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) r15 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x12, r15, 0x3f9f4000) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x12, r15, 0x3f9f4000) [ 716.782587][T24180] RDX: 0000000020000540 RSI: 00000000000089f3 RDI: 0000000000000003 [ 716.790562][T24180] RBP: 00007f7414d111d0 R08: 0000000000000000 R09: 0000000000000000 [ 716.798725][T24180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.806690][T24180] R13: 00007ffe84f92d9f R14: 00007f7414d11300 R15: 0000000000022000 [ 716.836326][T24182] FAULT_INJECTION: forcing a failure. [ 716.836326][T24182] name failslab, interval 1, probability 0, space 0, times 0 [ 716.849214][T24182] CPU: 1 PID: 24182 Comm: syz-executor.0 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 716.860929][T24184] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 716.860955][T24182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 716.873522][T24184] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 716.883219][T24182] Call Trace: [ 716.883240][T24182] dump_stack_lvl+0x1e2/0x24b [ 716.883250][T24182] ? panic+0x7d7/0x7d7 [ 716.883281][T24182] ? bfq_pos_tree_add_move+0x43e/0x43e [ 716.883301][T24182] dump_stack+0x15/0x17 [ 716.895718][T24184] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 716.898719][T24182] should_fail+0x3c0/0x510 [ 716.898734][T24182] ? call_usermodehelper_setup+0x8b/0x210 21:23:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) (fail_nth: 1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 716.898754][T24182] __should_failslab+0x9f/0xe0 [ 716.940919][T24182] should_failslab+0x9/0x20 [ 716.945433][T24182] kmem_cache_alloc_trace+0x3a/0x330 [ 716.950732][T24182] ? __kmalloc_track_caller+0x1c4/0x350 [ 716.956295][T24182] call_usermodehelper_setup+0x8b/0x210 [ 716.959511][T24188] FAULT_INJECTION: forcing a failure. [ 716.959511][T24188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.961865][T24182] ? __request_module+0x870/0x870 [ 716.961878][T24182] __request_module+0x36d/0x870 [ 716.961899][T24182] ? capable+0x79/0xe0 [ 716.988862][T24182] ? asan.module_ctor+0x10/0x10 [ 716.993804][T24182] ? selinux_capable+0x39/0x50 [ 716.998564][T24182] ? security_capable+0xb2/0xd0 [ 717.003457][T24182] dev_load+0x5d/0xc0 [ 717.007439][T24182] dev_ioctl+0x5a8/0xae0 [ 717.011691][T24182] sock_ioctl+0x68a/0x770 [ 717.016014][T24182] ? sock_poll+0x310/0x310 [ 717.020436][T24182] ? __fget_files+0x310/0x370 [ 717.025112][T24182] ? security_file_ioctl+0xb1/0xd0 [ 717.030223][T24182] ? sock_poll+0x310/0x310 [ 717.034656][T24182] __se_sys_ioctl+0x115/0x190 [ 717.039345][T24182] __x64_sys_ioctl+0x7b/0x90 [ 717.043934][T24182] do_syscall_64+0x34/0x70 [ 717.048350][T24182] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 717.054232][T24182] RIP: 0033:0x7f7415f9e0f9 [ 717.058645][T24182] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 717.078245][T24182] RSP: 002b:00007f7414d11168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.086949][T24182] RAX: ffffffffffffffda RBX: 00007f74160bdf80 RCX: 00007f7415f9e0f9 [ 717.094918][T24182] RDX: 0000000020000540 RSI: 00000000000089f3 RDI: 0000000000000003 [ 717.102884][T24182] RBP: 00007f7414d111d0 R08: 0000000000000000 R09: 0000000000000000 [ 717.110854][T24182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.118820][T24182] R13: 00007ffe84f92d9f R14: 00007f7414d11300 R15: 0000000000022000 [ 717.126805][T24188] CPU: 0 PID: 24188 Comm: syz-executor.3 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 717.138524][T24188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 717.148588][T24188] Call Trace: [ 717.151893][T24188] dump_stack_lvl+0x1e2/0x24b [ 717.156586][T24188] ? bfq_pos_tree_add_move+0x43e/0x43e [ 717.162054][T24188] dump_stack+0x15/0x17 [ 717.166228][T24188] should_fail+0x3c0/0x510 [ 717.170668][T24188] should_fail_usercopy+0x1a/0x20 [ 717.175805][T24188] _copy_from_user+0x20/0xd0 [ 717.180495][T24188] sock_ioctl+0x64d/0x770 [ 717.184847][T24188] ? sock_poll+0x310/0x310 [ 717.189282][T24188] ? __fget_files+0x310/0x370 [ 717.194064][T24188] ? security_file_ioctl+0xb1/0xd0 [ 717.199182][T24188] ? sock_poll+0x310/0x310 [ 717.203599][T24188] __se_sys_ioctl+0x115/0x190 [ 717.208273][T24188] __x64_sys_ioctl+0x7b/0x90 [ 717.212886][T24188] do_syscall_64+0x34/0x70 [ 717.217299][T24188] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 717.223183][T24188] RIP: 0033:0x7fdb5cece0f9 [ 717.227590][T24188] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 717.247187][T24188] RSP: 002b:00007fdb5bc41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.255792][T24188] RAX: ffffffffffffffda RBX: 00007fdb5cfedf80 RCX: 00007fdb5cece0f9 [ 717.263767][T24188] RDX: 0000000020000540 RSI: 00000000000089f3 RDI: 0000000000000003 [ 717.271839][T24188] RBP: 00007fdb5bc411d0 R08: 0000000000000000 R09: 0000000000000000 [ 717.279806][T24188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 21:23:21 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 1) 21:23:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) (fail_nth: 5) 21:23:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) (fail_nth: 2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 717.287789][T24188] R13: 00007ffe7c241b8f R14: 00007fdb5bc41300 R15: 0000000000022000 [ 717.304002][T24200] FAULT_INJECTION: forcing a failure. [ 717.304002][T24200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.318176][T24200] CPU: 1 PID: 24200 Comm: syz-executor.0 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 717.329896][T24200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 717.339963][T24200] Call Trace: [ 717.343267][T24200] dump_stack_lvl+0x1e2/0x24b [ 717.348124][T24200] ? panic+0x7d7/0x7d7 [ 717.352186][T24200] ? bfq_pos_tree_add_move+0x43e/0x43e [ 717.357645][T24200] dump_stack+0x15/0x17 [ 717.361796][T24200] should_fail+0x3c0/0x510 [ 717.366202][T24200] should_fail_usercopy+0x1a/0x20 [ 717.371245][T24200] _copy_to_user+0x20/0x90 [ 717.375741][T24200] simple_read_from_buffer+0xdd/0x160 [ 717.381105][T24200] proc_fail_nth_read+0x1af/0x220 [ 717.386117][T24200] ? security_file_permission+0x9d/0xc0 [ 717.391650][T24200] ? proc_fault_inject_write+0x3a0/0x3a0 [ 717.397270][T24200] ? security_file_permission+0xa8/0xc0 [ 717.402803][T24200] ? rw_verify_area+0x1c2/0x360 [ 717.407661][T24200] ? full_name_hash+0xa1/0xf0 [ 717.412330][T24200] ? proc_fault_inject_write+0x3a0/0x3a0 [ 717.417949][T24200] vfs_read+0x22b/0xbf0 [ 717.422273][T24200] ? netdev_refcnt_read+0x1f0/0x1f0 [ 717.427691][T24200] ? kernel_read+0x70/0x70 [ 717.433192][T24200] ? __kasan_check_write+0x14/0x20 [ 717.438384][T24200] ? mutex_lock+0xb2/0x1e0 [ 717.442827][T24200] ? mutex_trylock+0x180/0x180 [ 717.447606][T24200] ? __fdget_pos+0x26d/0x310 [ 717.452199][T24200] ? ksys_read+0x77/0x2c0 [ 717.456518][T24200] ksys_read+0x198/0x2c0 [ 717.460751][T24200] ? vfs_write+0xf80/0xf80 [ 717.465158][T24200] ? debug_smp_processor_id+0x17/0x20 [ 717.470536][T24200] __x64_sys_read+0x7b/0x90 [ 717.475031][T24200] do_syscall_64+0x34/0x70 [ 717.479440][T24200] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 717.485329][T24200] RIP: 0033:0x7f7415f4ff1c [ 717.489818][T24200] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 717.509512][T24200] RSP: 002b:00007f7414d11160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 717.517920][T24200] RAX: ffffffffffffffda RBX: 00007f74160bdf80 RCX: 00007f7415f4ff1c [ 717.525968][T24200] RDX: 000000000000000f RSI: 00007f7414d111e0 RDI: 0000000000000004 21:23:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4b47, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4b49, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 717.533933][T24200] RBP: 00007f7414d111d0 R08: 0000000000000000 R09: 0000000000000000 [ 717.541917][T24200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.549909][T24200] R13: 00007ffe84f92d9f R14: 00007f7414d11300 R15: 0000000000022000 [ 717.609969][T24213] FAULT_INJECTION: forcing a failure. [ 717.609969][T24213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.612454][T24203] FAULT_INJECTION: forcing a failure. [ 717.612454][T24203] name failslab, interval 1, probability 0, space 0, times 0 [ 717.624002][T24213] CPU: 0 PID: 24213 Comm: syz-executor.3 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 717.647353][T24213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 717.657406][T24213] Call Trace: [ 717.660709][T24213] dump_stack_lvl+0x1e2/0x24b [ 717.665395][T24213] ? bfq_pos_tree_add_move+0x43e/0x43e [ 717.670848][T24213] ? avc_has_extended_perms+0xb66/0x1270 [ 717.676498][T24213] ? trace_spf_vma_access+0x100/0x100 [ 717.681875][T24213] dump_stack+0x15/0x17 [ 717.686021][T24213] should_fail+0x3c0/0x510 [ 717.690431][T24213] should_fail_usercopy+0x1a/0x20 [ 717.695448][T24213] _copy_from_user+0x20/0xd0 [ 717.700035][T24213] vti6_ioctl+0x42c/0x17d0 [ 717.704446][T24213] ? memset+0x35/0x40 [ 717.708419][T24213] ? vti6_tnl_xmit+0x1760/0x1760 [ 717.713352][T24213] ? ioctl_has_perm+0x3da/0x560 [ 717.718212][T24213] ? full_name_hash+0xa1/0xf0 [ 717.722883][T24213] dev_ifsioc+0x6be/0xb00 [ 717.727211][T24213] ? dev_ioctl+0xae0/0xae0 [ 717.731625][T24213] dev_ioctl+0x5bb/0xae0 [ 717.735860][T24213] sock_ioctl+0x68a/0x770 [ 717.740184][T24213] ? sock_poll+0x310/0x310 [ 717.744591][T24213] ? __fget_files+0x310/0x370 [ 717.749260][T24213] ? security_file_ioctl+0xb1/0xd0 [ 717.754368][T24213] ? sock_poll+0x310/0x310 [ 717.758778][T24213] __se_sys_ioctl+0x115/0x190 [ 717.763447][T24213] __x64_sys_ioctl+0x7b/0x90 [ 717.768056][T24213] do_syscall_64+0x34/0x70 [ 717.772468][T24213] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 717.778351][T24213] RIP: 0033:0x7fdb5cece0f9 [ 717.782768][T24213] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 717.802496][T24213] RSP: 002b:00007fdb5bc41168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.810923][T24213] RAX: ffffffffffffffda RBX: 00007fdb5cfedf80 RCX: 00007fdb5cece0f9 [ 717.818891][T24213] RDX: 0000000020000540 RSI: 00000000000089f3 RDI: 0000000000000003 [ 717.826859][T24213] RBP: 00007fdb5bc411d0 R08: 0000000000000000 R09: 0000000000000000 [ 717.834821][T24213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.842804][T24213] R13: 00007ffe7c241b8f R14: 00007fdb5bc41300 R15: 0000000000022000 [ 717.850784][T24203] CPU: 1 PID: 24203 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 717.862502][T24203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 717.866745][T24195] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 717.872571][T24203] Call Trace: [ 717.872589][T24203] dump_stack_lvl+0x1e2/0x24b [ 717.872600][T24203] ? panic+0x7d7/0x7d7 [ 717.872612][T24203] ? bfq_pos_tree_add_move+0x43e/0x43e [ 717.872634][T24203] ? do_vfs_ioctl+0x796/0x1a90 [ 717.885174][T24195] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 717.888127][T24203] dump_stack+0x15/0x17 [ 717.888141][T24203] should_fail+0x3c0/0x510 [ 717.888154][T24203] ? loop_add+0x5a/0x760 [ 717.888175][T24203] __should_failslab+0x9f/0xe0 [ 717.893806][T24195] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 717.896891][T24203] should_failslab+0x9/0x20 [ 717.896906][T24203] kmem_cache_alloc_trace+0x3a/0x330 [ 717.896918][T24203] ? mutex_lock_killable+0x136/0x1e0 [ 717.896940][T24203] ? kernel_write+0x420/0x420 [ 717.965456][T24203] loop_add+0x5a/0x760 [ 717.969545][T24203] loop_control_ioctl+0x564/0x740 [ 717.974562][T24203] ? loop_remove+0xb0/0xb0 [ 717.978970][T24203] ? __fget_files+0x310/0x370 [ 717.983659][T24203] ? security_file_ioctl+0xb1/0xd0 [ 717.988758][T24203] ? loop_remove+0xb0/0xb0 [ 717.993164][T24203] __se_sys_ioctl+0x115/0x190 [ 717.997831][T24203] __x64_sys_ioctl+0x7b/0x90 [ 718.002413][T24203] do_syscall_64+0x34/0x70 [ 718.006818][T24203] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 718.012701][T24203] RIP: 0033:0x7fb457f980f9 [ 718.017111][T24203] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 718.036713][T24203] RSP: 002b:00007fb456cea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 718.045119][T24203] RAX: ffffffffffffffda RBX: 00007fb4580b8050 RCX: 00007fb457f980f9 [ 718.053082][T24203] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 21:23:22 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) (fail_nth: 3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 718.061128][T24203] RBP: 00007fb456cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 718.069091][T24203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.077057][T24203] R13: 00007ffeb359550f R14: 00007fb456cea300 R15: 0000000000022000 21:23:22 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:22 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="15"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:22 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 2) 21:23:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5450, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 718.114079][T24217] FAULT_INJECTION: forcing a failure. [ 718.114079][T24217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.127276][T24217] CPU: 1 PID: 24217 Comm: syz-executor.3 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 718.139088][T24217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 718.149165][T24217] Call Trace: [ 718.152476][T24217] dump_stack_lvl+0x1e2/0x24b [ 718.157177][T24217] ? panic+0x7d7/0x7d7 21:23:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5451, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5452, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5460, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 718.161261][T24217] ? bfq_pos_tree_add_move+0x43e/0x43e [ 718.166737][T24217] dump_stack+0x15/0x17 [ 718.170905][T24217] should_fail+0x3c0/0x510 [ 718.175332][T24217] should_fail_usercopy+0x1a/0x20 [ 718.181534][T24217] _copy_to_user+0x20/0x90 [ 718.186170][T24217] simple_read_from_buffer+0xdd/0x160 [ 718.191857][T24217] proc_fail_nth_read+0x1af/0x220 [ 718.196907][T24217] ? security_file_permission+0x9d/0xc0 [ 718.202599][T24217] ? proc_fault_inject_write+0x3a0/0x3a0 [ 718.208250][T24217] ? security_file_permission+0xa8/0xc0 [ 718.213809][T24217] ? rw_verify_area+0x1c2/0x360 [ 718.218677][T24217] ? full_name_hash+0xa1/0xf0 [ 718.223367][T24217] ? proc_fault_inject_write+0x3a0/0x3a0 [ 718.229019][T24217] vfs_read+0x22b/0xbf0 [ 718.233187][T24217] ? netdev_refcnt_read+0x1f0/0x1f0 [ 718.238397][T24217] ? kernel_read+0x70/0x70 [ 718.242830][T24217] ? __kasan_check_write+0x14/0x20 [ 718.247978][T24217] ? mutex_lock+0xb2/0x1e0 [ 718.252413][T24217] ? mutex_trylock+0x180/0x180 [ 718.252485][T24236] FAULT_INJECTION: forcing a failure. [ 718.252485][T24236] name failslab, interval 1, probability 0, space 0, times 0 [ 718.257188][T24217] ? __fdget_pos+0x26d/0x310 [ 718.257202][T24217] ? ksys_read+0x77/0x2c0 [ 718.257221][T24217] ksys_read+0x198/0x2c0 [ 718.282932][T24217] ? vfs_write+0xf80/0xf80 [ 718.287374][T24217] ? debug_smp_processor_id+0x17/0x20 [ 718.292749][T24217] __x64_sys_read+0x7b/0x90 [ 718.297353][T24217] do_syscall_64+0x34/0x70 [ 718.301805][T24217] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 718.307693][T24217] RIP: 0033:0x7fdb5ce7ff1c [ 718.312245][T24217] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 718.331948][T24217] RSP: 002b:00007fdb5bc41160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 718.340500][T24217] RAX: ffffffffffffffda RBX: 00007fdb5cfedf80 RCX: 00007fdb5ce7ff1c [ 718.348607][T24217] RDX: 000000000000000f RSI: 00007fdb5bc411e0 RDI: 0000000000000004 [ 718.356607][T24217] RBP: 00007fdb5bc411d0 R08: 0000000000000000 R09: 0000000000000000 21:23:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8910, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 718.364672][T24217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.372643][T24217] R13: 00007ffe7c241b8f R14: 00007fdb5bc41300 R15: 0000000000022000 [ 718.380630][T24236] CPU: 0 PID: 24236 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 718.392358][T24236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 718.402419][T24236] Call Trace: [ 718.405700][T24236] dump_stack_lvl+0x1e2/0x24b [ 718.410451][T24236] ? bfq_pos_tree_add_move+0x43e/0x43e [ 718.415892][T24236] dump_stack+0x15/0x17 [ 718.420128][T24236] should_fail+0x3c0/0x510 [ 718.424533][T24236] ? blk_mq_alloc_tag_set+0x308/0xd40 [ 718.429887][T24236] __should_failslab+0x9f/0xe0 [ 718.434720][T24236] should_failslab+0x9/0x20 [ 718.439235][T24236] __kmalloc+0x60/0x360 [ 718.443475][T24236] ? idr_alloc_u32+0x300/0x300 [ 718.448234][T24236] blk_mq_alloc_tag_set+0x308/0xd40 [ 718.453429][T24236] loop_add+0x241/0x760 [ 718.457575][T24236] loop_control_ioctl+0x564/0x740 [ 718.462592][T24236] ? loop_remove+0xb0/0xb0 [ 718.467607][T24236] ? __fget_files+0x310/0x370 [ 718.472287][T24236] ? security_file_ioctl+0xb1/0xd0 [ 718.477468][T24236] ? loop_remove+0xb0/0xb0 [ 718.481881][T24236] __se_sys_ioctl+0x115/0x190 [ 718.486560][T24236] __x64_sys_ioctl+0x7b/0x90 [ 718.491173][T24236] do_syscall_64+0x34/0x70 [ 718.495577][T24236] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 718.501455][T24236] RIP: 0033:0x7fb457f980f9 [ 718.505861][T24236] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 718.525546][T24236] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 718.533970][T24236] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 718.541946][T24236] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 718.549906][T24236] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 718.557863][T24236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.565824][T24236] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 718.599502][T24238] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 718.612947][T24241] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 718.626148][T24241] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 718.627821][T24238] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 718.638889][T24241] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 21:23:22 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8911, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 718.657300][T24238] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:22 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:22 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 3) 21:23:22 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="15"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8913, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 718.737025][T24249] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 718.761564][T24249] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 718.772374][T24260] FAULT_INJECTION: forcing a failure. [ 718.772374][T24260] name failslab, interval 1, probability 0, space 0, times 0 21:23:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8914, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891d, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891e, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 718.776171][T24249] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 718.788120][T24262] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 718.801484][T24260] CPU: 0 PID: 24260 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 718.816632][T24260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 718.826699][T24260] Call Trace: [ 718.830003][T24260] dump_stack_lvl+0x1e2/0x24b 21:23:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891f, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 718.834719][T24260] ? bfq_pos_tree_add_move+0x43e/0x43e [ 718.840197][T24260] dump_stack+0x15/0x17 [ 718.844369][T24260] should_fail+0x3c0/0x510 [ 718.848798][T24260] ? blk_mq_alloc_tag_set+0x3eb/0xd40 [ 718.854187][T24260] __should_failslab+0x9f/0xe0 [ 718.858974][T24260] should_failslab+0x9/0x20 [ 718.863487][T24260] __kmalloc+0x60/0x360 [ 718.867678][T24260] ? blk_mq_alloc_tag_set+0x308/0xd40 [ 718.873049][T24260] blk_mq_alloc_tag_set+0x3eb/0xd40 [ 718.878245][T24260] loop_add+0x241/0x760 [ 718.882441][T24260] loop_control_ioctl+0x564/0x740 [ 718.887467][T24260] ? loop_remove+0xb0/0xb0 [ 718.891879][T24260] ? __fget_files+0x310/0x370 [ 718.896570][T24260] ? security_file_ioctl+0xb1/0xd0 [ 718.901676][T24260] ? loop_remove+0xb0/0xb0 [ 718.906094][T24260] __se_sys_ioctl+0x115/0x190 [ 718.910869][T24260] __x64_sys_ioctl+0x7b/0x90 [ 718.915457][T24260] do_syscall_64+0x34/0x70 [ 718.919872][T24260] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 718.925956][T24260] RIP: 0033:0x7fb457f980f9 [ 718.930375][T24260] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 718.949981][T24260] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 718.958389][T24260] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 718.966368][T24260] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 718.974352][T24260] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 718.982347][T24260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.990322][T24260] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8920, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:22 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 4) [ 719.034992][T24256] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 719.050175][T24256] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 719.060795][T24277] FAULT_INJECTION: forcing a failure. [ 719.060795][T24277] name failslab, interval 1, probability 0, space 0, times 0 [ 719.062773][T24256] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 719.083497][T24277] CPU: 1 PID: 24277 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 719.095606][T24277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 719.105666][T24277] Call Trace: [ 719.109074][T24277] dump_stack_lvl+0x1e2/0x24b [ 719.113777][T24277] ? panic+0x7d7/0x7d7 [ 719.117841][T24277] ? blk_mq_alloc_tag_set+0x3eb/0xd40 [ 719.123223][T24277] ? bfq_pos_tree_add_move+0x43e/0x43e [ 719.128681][T24277] ? ____kasan_kmalloc+0xf3/0x110 [ 719.133705][T24277] ? __kasan_kmalloc+0x9/0x10 [ 719.138383][T24277] ? __kmalloc+0x1f7/0x360 [ 719.142829][T24277] ? blk_mq_alloc_tag_set+0x3eb/0xd40 [ 719.148205][T24277] ? loop_control_ioctl+0x564/0x740 [ 719.153408][T24277] ? __se_sys_ioctl+0x115/0x190 [ 719.158257][T24277] ? __x64_sys_ioctl+0x7b/0x90 [ 719.163038][T24277] dump_stack+0x15/0x17 [ 719.167186][T24277] should_fail+0x3c0/0x510 [ 719.171629][T24277] ? blk_mq_init_tags+0x73/0x410 [ 719.176567][T24277] __should_failslab+0x9f/0xe0 [ 719.181327][T24277] should_failslab+0x9/0x20 [ 719.185827][T24277] kmem_cache_alloc_trace+0x3a/0x330 [ 719.191102][T24277] ? find_next_bit+0xf5/0x120 [ 719.195773][T24277] blk_mq_init_tags+0x73/0x410 [ 719.200530][T24277] blk_mq_alloc_rq_map+0x7e/0x190 [ 719.205545][T24277] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 719.211520][T24277] blk_mq_alloc_tag_set+0x662/0xd40 [ 719.216733][T24277] loop_add+0x241/0x760 [ 719.220884][T24277] loop_control_ioctl+0x564/0x740 [ 719.225901][T24277] ? loop_remove+0xb0/0xb0 [ 719.230307][T24277] ? __fget_files+0x310/0x370 [ 719.235072][T24277] ? security_file_ioctl+0xb1/0xd0 [ 719.240196][T24277] ? loop_remove+0xb0/0xb0 [ 719.244645][T24277] __se_sys_ioctl+0x115/0x190 [ 719.249328][T24277] __x64_sys_ioctl+0x7b/0x90 [ 719.253923][T24277] do_syscall_64+0x34/0x70 [ 719.258533][T24277] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 719.264421][T24277] RIP: 0033:0x7fb457f980f9 [ 719.268831][T24277] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 719.288516][T24277] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.296926][T24277] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 719.304897][T24277] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 719.313214][T24277] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 719.321200][T24277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.329167][T24277] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 719.338012][T24277] blk-mq: reduced tag depth (128 -> 64) 21:23:23 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:23 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4b47, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 719.451517][T24281] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 719.465910][T24284] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 719.466937][T24281] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 719.478488][T24284] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 719.491606][T24281] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 719.503159][T24284] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:23 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 5) 21:23:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8921, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4b49, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:23 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:23 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8922, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:23 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="15"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x541b, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8923, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8924, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8927, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5421, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 719.668314][T24308] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 719.678716][T24293] FAULT_INJECTION: forcing a failure. [ 719.678716][T24293] name failslab, interval 1, probability 0, space 0, times 0 [ 719.695337][T24300] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 719.698752][T24293] CPU: 0 PID: 24293 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 719.713174][T24300] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 719.719299][T24293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 719.719305][T24293] Call Trace: [ 719.719324][T24293] dump_stack_lvl+0x1e2/0x24b [ 719.719347][T24293] ? panic+0x7d7/0x7d7 [ 719.731773][T24300] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 719.741536][T24293] ? bfq_pos_tree_add_move+0x43e/0x43e [ 719.741549][T24293] dump_stack+0x15/0x17 [ 719.741563][T24293] should_fail+0x3c0/0x510 [ 719.741586][T24293] ? sbitmap_queue_init_node+0x163/0x1060 [ 719.782085][T24293] __should_failslab+0x9f/0xe0 [ 719.786848][T24293] should_failslab+0x9/0x20 [ 719.791342][T24293] __kmalloc+0x60/0x360 [ 719.795502][T24293] sbitmap_queue_init_node+0x163/0x1060 [ 719.801045][T24293] blk_mq_init_tags+0x165/0x410 [ 719.805891][T24293] blk_mq_alloc_rq_map+0x7e/0x190 [ 719.810930][T24293] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 719.816906][T24293] blk_mq_alloc_tag_set+0x662/0xd40 [ 719.822104][T24293] loop_add+0x241/0x760 [ 719.826342][T24293] loop_control_ioctl+0x564/0x740 [ 719.831363][T24293] ? loop_remove+0xb0/0xb0 [ 719.835769][T24293] ? __fget_files+0x310/0x370 [ 719.840447][T24293] ? security_file_ioctl+0xb1/0xd0 [ 719.845551][T24293] ? loop_remove+0xb0/0xb0 [ 719.849964][T24293] __se_sys_ioctl+0x115/0x190 [ 719.854632][T24293] __x64_sys_ioctl+0x7b/0x90 [ 719.859238][T24293] do_syscall_64+0x34/0x70 [ 719.863650][T24293] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 719.869536][T24293] RIP: 0033:0x7fb457f980f9 [ 719.873948][T24293] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 719.893642][T24293] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.902065][T24293] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 719.910043][T24293] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 21:23:23 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 6) [ 719.918103][T24293] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 719.926093][T24293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.934159][T24293] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 719.943300][T24293] blk-mq: reduced tag depth (128 -> 64) [ 719.981473][T24299] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 719.994173][T24299] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 720.007707][T24299] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 720.060379][T24323] FAULT_INJECTION: forcing a failure. [ 720.060379][T24323] name failslab, interval 1, probability 0, space 0, times 0 [ 720.073153][T24323] CPU: 1 PID: 24323 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 720.084952][T24323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 720.095014][T24323] Call Trace: [ 720.098389][T24323] dump_stack_lvl+0x1e2/0x24b [ 720.103061][T24323] ? bfq_pos_tree_add_move+0x43e/0x43e [ 720.108514][T24323] ? find_next_bit+0xd6/0x120 [ 720.113184][T24323] ? cpumask_next+0x11/0x30 [ 720.117675][T24323] dump_stack+0x15/0x17 [ 720.121826][T24323] should_fail+0x3c0/0x510 [ 720.126374][T24323] ? sbitmap_queue_init_node+0x72c/0x1060 [ 720.132117][T24323] __should_failslab+0x9f/0xe0 [ 720.136902][T24323] should_failslab+0x9/0x20 [ 720.141516][T24323] kmem_cache_alloc_trace+0x3a/0x330 [ 720.146890][T24323] ? find_next_bit+0xd6/0x120 [ 720.151597][T24323] ? cpumask_next+0x11/0x30 [ 720.156100][T24323] sbitmap_queue_init_node+0x72c/0x1060 [ 720.161673][T24323] blk_mq_init_tags+0x165/0x410 [ 720.166711][T24323] blk_mq_alloc_rq_map+0x7e/0x190 [ 720.171873][T24323] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 720.177941][T24323] blk_mq_alloc_tag_set+0x662/0xd40 [ 720.183143][T24323] loop_add+0x241/0x760 [ 720.187319][T24323] loop_control_ioctl+0x564/0x740 [ 720.192434][T24323] ? loop_remove+0xb0/0xb0 [ 720.201631][T24323] ? __fget_files+0x310/0x370 [ 720.206612][T24323] ? security_file_ioctl+0xb1/0xd0 [ 720.211717][T24323] ? loop_remove+0xb0/0xb0 [ 720.216168][T24323] __se_sys_ioctl+0x115/0x190 [ 720.220870][T24323] __x64_sys_ioctl+0x7b/0x90 [ 720.225462][T24323] do_syscall_64+0x34/0x70 [ 720.229879][T24323] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 720.235771][T24323] RIP: 0033:0x7fb457f980f9 [ 720.240210][T24323] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 720.259984][T24323] RSP: 002b:00007fb456cea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.268403][T24323] RAX: ffffffffffffffda RBX: 00007fb4580b8050 RCX: 00007fb457f980f9 [ 720.276408][T24323] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 720.284381][T24323] RBP: 00007fb456cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 720.292573][T24323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.300561][T24323] R13: 00007ffeb359550f R14: 00007fb456cea300 R15: 0000000000022000 [ 720.308909][T24323] blk-mq: reduced tag depth (128 -> 64) 21:23:24 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8929, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5450, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:24 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 7) 21:23:24 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs289PHFUcAPDv7AK1pRWs9UdpVYwaiT+g0Ko9eFCjiQdNTPRQjwi0wW6LKZjYhih6qAcP2sS78WjiX+BJL0Y9mXjVu2nSGC6tntbM7gwsdBdZWNja+XySgfdm3ua97755u2/m7QRQWMPpnyRif0T8HhED9ezaAsP1fzeWF6f+Xl6cSqJaffOvpFbu+vLiVF40f11/nlmq5480qXf+4qWzk5XKzIUsP7Zw7r2x+YuXnp49N3lm5szM+YmTJ08cH3/u2YlnOhJnGtf1oQ/njh5+9e0rr0+duvLOz98mefzr4uiQ4Y0OPtbhyrrtQEM66eliQ2hLOSLS7uqtjf+BKMdq5w3EK590tXHAjqpWq9XPyi0PL1WB21gS3W4B0B35F316/ZtvuzX3uBVce7F+AZTGfSPb6kd6opSV6V13fdtJwxFxaumfr9ItduY+BADAGt+n85+nms3/SnFvQ7k7szWUwYi4KyIORsTdEXEoIu6JqJW9LyLub7P+9YskN89/Sle3FNgmpfO/57O1rbXzv3z2F4PlLHegFn9vcnq2MnMse09GondPmh/foI4fXv7t81bHGud/6ZbWn88Fs3Zc7dmz9jXTkwuT24m50bWPI4Z6msWfrKwEJBFxOCKGtljH7BPfHG117L/j30AH1pmqX0c8Xu//pVgXfy7ZeH1y7I6ozBwby8+Km/3y6+U3WtW/rfg7IO3/fU3P/5X4B5PG9dr59uu4/MenLa9ptnr+9yVv1dJ92b4PJhcWLoxH9CWvZftfWN0/sfraPJ+XT+MfeaT5+D8Yq+/EkYhIT+IHIuLBiHgoa/vDEdH/xcbx//TSo+9uPf6dlcY/3Vb/t58on/3xuzWVDrYTf9r/J2qpkWzPZj7/NtvA7b5/AAAA8H9Qioj9kZRGV9Kl0uho/Tf8h2JfqTI3v/Dk6bn3z0/XnxEYjN5SfqdroOF+6Hh2WZ/nJ9blj2f3jb8s763lR6fmKtPdDh4Krr/F+E/92fp3wcDtwvNaUFzGPxSX8Q/FZfxDcTUZ/3u70Q5g9zX7/v+oC+0Adp/5PxSX8Q/FZfxDcRn/UEjbea5fosiJKN0SzZDYoUS3P5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6498AAAD//wgh53k=") 21:23:24 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) socketpair(0x25, 0x3, 0x5, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5451, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8930, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5452, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 720.536567][T24330] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 720.550812][T24329] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 720.559929][T24330] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) 21:23:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8931, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8932, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5460, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 720.563699][T24329] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 720.575847][T24330] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 720.590774][T24344] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 720.605972][T24329] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 720.663363][T24345] FAULT_INJECTION: forcing a failure. [ 720.663363][T24345] name failslab, interval 1, probability 0, space 0, times 0 [ 720.676288][T24345] CPU: 0 PID: 24345 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 720.687990][T24345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 720.698036][T24345] Call Trace: [ 720.701337][T24345] dump_stack_lvl+0x1e2/0x24b [ 720.706014][T24345] ? bfq_pos_tree_add_move+0x43e/0x43e [ 720.711459][T24345] ? find_next_bit+0xd6/0x120 [ 720.716123][T24345] ? cpumask_next+0x11/0x30 [ 720.720611][T24345] dump_stack+0x15/0x17 [ 720.724752][T24345] should_fail+0x3c0/0x510 [ 720.729156][T24345] ? sbitmap_queue_init_node+0x72c/0x1060 [ 720.734904][T24345] __should_failslab+0x9f/0xe0 [ 720.739654][T24345] should_failslab+0x9/0x20 [ 720.744143][T24345] kmem_cache_alloc_trace+0x3a/0x330 [ 720.749438][T24345] sbitmap_queue_init_node+0x72c/0x1060 [ 720.754971][T24345] blk_mq_init_tags+0x1dc/0x410 [ 720.759833][T24345] blk_mq_alloc_rq_map+0x7e/0x190 [ 720.764845][T24345] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 720.770820][T24345] blk_mq_alloc_tag_set+0x662/0xd40 [ 720.776005][T24345] loop_add+0x241/0x760 [ 720.780150][T24345] loop_control_ioctl+0x564/0x740 [ 720.785160][T24345] ? loop_remove+0xb0/0xb0 [ 720.789561][T24345] ? __fget_files+0x310/0x370 [ 720.794225][T24345] ? security_file_ioctl+0xb1/0xd0 [ 720.799323][T24345] ? loop_remove+0xb0/0xb0 [ 720.803740][T24345] __se_sys_ioctl+0x115/0x190 [ 720.808417][T24345] __x64_sys_ioctl+0x7b/0x90 [ 720.813001][T24345] do_syscall_64+0x34/0x70 [ 720.817412][T24345] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 720.823292][T24345] RIP: 0033:0x7fb457f980f9 [ 720.827701][T24345] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 720.847302][T24345] RSP: 002b:00007fb456cea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.855721][T24345] RAX: ffffffffffffffda RBX: 00007fb4580b8050 RCX: 00007fb457f980f9 21:23:24 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8933, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:24 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 8) 21:23:24 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8910, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 720.863696][T24345] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 720.871655][T24345] RBP: 00007fb456cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 720.879614][T24345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.887585][T24345] R13: 00007ffeb359550f R14: 00007fb456cea300 R15: 0000000000022000 [ 720.897076][T24345] blk-mq: reduced tag depth (128 -> 64) [ 720.965999][T24359] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 720.978868][T24359] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 720.993449][T24357] FAULT_INJECTION: forcing a failure. [ 720.993449][T24357] name failslab, interval 1, probability 0, space 0, times 0 [ 720.995093][T24359] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 721.006147][T24357] CPU: 0 PID: 24357 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 721.026671][T24357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 721.036746][T24357] Call Trace: [ 721.040038][T24357] dump_stack_lvl+0x1e2/0x24b [ 721.044703][T24357] ? panic+0x7d7/0x7d7 [ 721.048763][T24357] ? bfq_pos_tree_add_move+0x43e/0x43e [ 721.054220][T24357] ? __kasan_kmalloc+0x9/0x10 [ 721.058896][T24357] ? kmem_cache_alloc_trace+0x1dd/0x330 [ 721.064431][T24357] dump_stack+0x15/0x17 [ 721.068581][T24357] should_fail+0x3c0/0x510 [ 721.072991][T24357] ? blk_mq_alloc_rq_map+0xa2/0x190 [ 721.078342][T24357] __should_failslab+0x9f/0xe0 [ 721.083110][T24357] should_failslab+0x9/0x20 [ 721.087607][T24357] __kmalloc+0x60/0x360 [ 721.091758][T24357] ? blk_mq_init_tags+0x2d0/0x410 [ 721.096901][T24357] blk_mq_alloc_rq_map+0xa2/0x190 [ 721.102032][T24357] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 721.108010][T24357] blk_mq_alloc_tag_set+0x662/0xd40 [ 721.113205][T24357] loop_add+0x241/0x760 [ 721.117356][T24357] loop_control_ioctl+0x564/0x740 [ 721.122378][T24357] ? loop_remove+0xb0/0xb0 [ 721.126798][T24357] ? __fget_files+0x310/0x370 [ 721.131484][T24357] ? security_file_ioctl+0xb1/0xd0 [ 721.136586][T24357] ? loop_remove+0xb0/0xb0 [ 721.141012][T24357] __se_sys_ioctl+0x115/0x190 [ 721.145680][T24357] __x64_sys_ioctl+0x7b/0x90 [ 721.150259][T24357] do_syscall_64+0x34/0x70 [ 721.154670][T24357] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 721.160812][T24357] RIP: 0033:0x7fb457f980f9 [ 721.165238][T24357] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 721.184836][T24357] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.193238][T24357] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 721.201214][T24357] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 721.209174][T24357] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 721.217133][T24357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.225127][T24357] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 721.233492][T24357] blk-mq: reduced tag depth (128 -> 64) [ 721.265665][T24365] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 721.278698][T24365] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 721.298047][T24365] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 21:23:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8911, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:25 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) socketpair(0x25, 0x3, 0x5, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) pipe(&(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) socketpair(0x25, 0x3, 0x5, &(0x7f00000000c0)) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) (async) 21:23:25 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 9) 21:23:25 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:25 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8937, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8942, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8913, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8943, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8946, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8947, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8948, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 721.403665][T24370] FAULT_INJECTION: forcing a failure. [ 721.403665][T24370] name failslab, interval 1, probability 0, space 0, times 0 [ 721.416818][T24370] CPU: 1 PID: 24370 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 721.428536][T24370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 721.438589][T24370] Call Trace: [ 721.441892][T24370] dump_stack_lvl+0x1e2/0x24b [ 721.446583][T24370] ? panic+0x7d7/0x7d7 21:23:25 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) socketpair(0x25, 0x3, 0x5, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) pipe(&(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) socketpair(0x25, 0x3, 0x5, &(0x7f00000000c0)) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) (async) [ 721.450653][T24370] ? bfq_pos_tree_add_move+0x43e/0x43e [ 721.456096][T24370] dump_stack+0x15/0x17 [ 721.459316][T24389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 721.460264][T24370] should_fail+0x3c0/0x510 [ 721.460277][T24370] ? blk_mq_alloc_rq_map+0xe2/0x190 [ 721.460298][T24370] __should_failslab+0x9f/0xe0 [ 721.483915][T24370] should_failslab+0x9/0x20 [ 721.488421][T24370] __kmalloc+0x60/0x360 [ 721.492572][T24370] ? blk_mq_alloc_rq_map+0xa2/0x190 [ 721.497766][T24370] blk_mq_alloc_rq_map+0xe2/0x190 21:23:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8949, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 721.502796][T24370] blk_mq_alloc_map_and_requests+0x12e/0x7d0 [ 721.508794][T24370] blk_mq_alloc_tag_set+0x662/0xd40 [ 721.513995][T24370] loop_add+0x241/0x760 [ 721.518142][T24370] loop_control_ioctl+0x564/0x740 [ 721.523181][T24370] ? loop_remove+0xb0/0xb0 [ 721.527615][T24370] ? __fget_files+0x310/0x370 [ 721.532297][T24370] ? security_file_ioctl+0xb1/0xd0 [ 721.537404][T24370] ? loop_remove+0xb0/0xb0 [ 721.541812][T24370] __se_sys_ioctl+0x115/0x190 [ 721.546488][T24370] __x64_sys_ioctl+0x7b/0x90 [ 721.551072][T24370] do_syscall_64+0x34/0x70 [ 721.555499][T24370] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 721.561381][T24370] RIP: 0033:0x7fb457f980f9 [ 721.565789][T24370] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 721.585381][T24370] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.593873][T24370] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 721.601835][T24370] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 721.609796][T24370] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 721.617845][T24370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.625824][T24370] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 721.634997][T24370] blk-mq: reduced tag depth (128 -> 64) 21:23:25 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 10) [ 721.658256][T24378] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 721.675697][T24378] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 721.676230][T24373] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 721.688154][T24378] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 721.704229][T24373] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 721.715461][T24409] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 721.722031][T24373] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 721.753462][T24408] FAULT_INJECTION: forcing a failure. [ 721.753462][T24408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 721.766990][T24408] CPU: 0 PID: 24408 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 721.778708][T24408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 721.788770][T24408] Call Trace: [ 721.792050][T24408] dump_stack_lvl+0x1e2/0x24b [ 721.796722][T24408] ? bfq_pos_tree_add_move+0x43e/0x43e [ 721.802180][T24408] ? blk_mq_alloc_tag_set+0x662/0xd40 [ 721.807583][T24408] ? __x64_sys_ioctl+0x7b/0x90 [ 721.812348][T24408] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 721.818431][T24408] dump_stack+0x15/0x17 [ 721.822583][T24408] should_fail+0x3c0/0x510 [ 721.827011][T24408] should_fail_alloc_page+0x50/0x60 [ 721.832222][T24408] __alloc_pages_nodemask+0x1c0/0x890 [ 721.837710][T24408] ? __se_sys_ioctl+0x115/0x190 [ 721.842559][T24408] ? __x64_sys_ioctl+0x7b/0x90 [ 721.847318][T24408] ? do_syscall_64+0x34/0x70 [ 721.851904][T24408] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 721.857465][T24408] ? cpumask_next+0x23/0x30 [ 721.861962][T24408] ? blk_mq_hw_queue_to_node+0x101/0x120 [ 721.867589][T24408] blk_mq_alloc_rqs+0x323/0x910 [ 721.872450][T24408] ? __kasan_kmalloc+0x9/0x10 [ 721.877114][T24408] ? blk_mq_alloc_rq_map+0x190/0x190 [ 721.882387][T24408] ? blk_mq_alloc_rq_map+0x11b/0x190 [ 721.887659][T24408] blk_mq_alloc_map_and_requests+0x1cb/0x7d0 [ 721.893633][T24408] blk_mq_alloc_tag_set+0x662/0xd40 [ 721.898839][T24408] loop_add+0x241/0x760 [ 721.903004][T24408] loop_control_ioctl+0x564/0x740 [ 721.908019][T24408] ? loop_remove+0xb0/0xb0 [ 721.912439][T24408] ? __fget_files+0x310/0x370 [ 721.917132][T24408] ? security_file_ioctl+0xb1/0xd0 [ 721.922251][T24408] ? loop_remove+0xb0/0xb0 [ 721.926671][T24408] __se_sys_ioctl+0x115/0x190 [ 721.931551][T24408] __x64_sys_ioctl+0x7b/0x90 [ 721.936155][T24408] do_syscall_64+0x34/0x70 [ 721.940593][T24408] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 721.946477][T24408] RIP: 0033:0x7fb457f980f9 [ 721.950907][T24408] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 721.970736][T24408] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.979150][T24408] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 721.987212][T24408] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 721.995193][T24408] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.003156][T24408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 722.011124][T24408] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:25 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x894a, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:25 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8914, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:25 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 11) 21:23:25 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8970, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891d, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8971, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891e, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 722.137560][T24424] FAULT_INJECTION: forcing a failure. [ 722.137560][T24424] name failslab, interval 1, probability 0, space 0, times 0 [ 722.150295][T24424] CPU: 0 PID: 24424 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 722.162011][T24424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 722.172052][T24424] Call Trace: [ 722.175332][T24424] dump_stack_lvl+0x1e2/0x24b [ 722.179997][T24424] ? bfq_pos_tree_add_move+0x43e/0x43e [ 722.185442][T24424] dump_stack+0x15/0x17 [ 722.189584][T24424] should_fail+0x3c0/0x510 [ 722.193989][T24424] __should_failslab+0x9f/0xe0 [ 722.198739][T24424] should_failslab+0x9/0x20 [ 722.203229][T24424] kmem_cache_alloc+0x3f/0x300 [ 722.207980][T24424] ? blk_alloc_queue+0x2a/0x640 [ 722.212853][T24424] blk_alloc_queue+0x2a/0x640 [ 722.217528][T24424] ? __mutex_init+0xa1/0xf0 [ 722.222019][T24424] ? blk_mq_alloc_tag_set+0xa57/0xd40 [ 722.227376][T24424] blk_mq_init_queue+0x35/0xc0 [ 722.232128][T24424] loop_add+0x270/0x760 [ 722.236286][T24424] loop_control_ioctl+0x564/0x740 [ 722.241294][T24424] ? loop_remove+0xb0/0xb0 [ 722.245705][T24424] ? __fget_files+0x310/0x370 [ 722.250372][T24424] ? security_file_ioctl+0xb1/0xd0 [ 722.255560][T24424] ? loop_remove+0xb0/0xb0 [ 722.260104][T24424] __se_sys_ioctl+0x115/0x190 [ 722.264875][T24424] __x64_sys_ioctl+0x7b/0x90 [ 722.269575][T24424] do_syscall_64+0x34/0x70 [ 722.274072][T24424] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 722.279952][T24424] RIP: 0033:0x7fb457f980f9 [ 722.284459][T24424] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 722.304057][T24424] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 722.312553][T24424] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 722.320522][T24424] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 722.328483][T24424] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.336466][T24424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 722.344434][T24424] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 722.376654][T24421] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 722.381595][T24422] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 722.391991][T24421] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 722.401658][T24422] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 722.414482][T24421] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 722.426274][T24422] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 21:23:26 executing program 1: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x338) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x3e8, 0x200, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200008b0}, 0x4634c6c13a5a3db7) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x40801) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x84ffe0, 0x0) 21:23:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8990, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:26 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 12) [ 722.507766][T24438] FAULT_INJECTION: forcing a failure. [ 722.507766][T24438] name failslab, interval 1, probability 0, space 0, times 0 [ 722.520839][T24438] CPU: 0 PID: 24438 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 722.532568][T24438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 722.542630][T24438] Call Trace: [ 722.545920][T24438] dump_stack_lvl+0x1e2/0x24b [ 722.550582][T24438] ? bfq_pos_tree_add_move+0x43e/0x43e [ 722.556159][T24438] dump_stack+0x15/0x17 [ 722.560310][T24438] should_fail+0x3c0/0x510 [ 722.564721][T24438] ? mempool_init_node+0x12b/0x4b0 [ 722.569819][T24438] __should_failslab+0x9f/0xe0 [ 722.574574][T24438] should_failslab+0x9/0x20 [ 722.579066][T24438] __kmalloc+0x60/0x360 [ 722.583211][T24438] ? ida_alloc_range+0xab1/0xb10 [ 722.588138][T24438] mempool_init_node+0x12b/0x4b0 [ 722.593061][T24438] ? mempool_alloc_slab+0x30/0x30 [ 722.598067][T24438] ? mempool_free+0x310/0x310 [ 722.602730][T24438] ? mempool_free+0x310/0x310 [ 722.607390][T24438] ? mempool_alloc_slab+0x30/0x30 [ 722.612414][T24438] mempool_init+0x3c/0x50 [ 722.616744][T24438] bioset_init+0x48e/0x640 [ 722.621171][T24438] blk_alloc_queue+0xc6/0x640 [ 722.625832][T24438] ? __mutex_init+0xa1/0xf0 [ 722.630325][T24438] blk_mq_init_queue+0x35/0xc0 [ 722.635078][T24438] loop_add+0x270/0x760 [ 722.639223][T24438] loop_control_ioctl+0x564/0x740 [ 722.644233][T24438] ? loop_remove+0xb0/0xb0 [ 722.648631][T24438] ? __fget_files+0x310/0x370 [ 722.653291][T24438] ? security_file_ioctl+0xb1/0xd0 [ 722.658410][T24438] ? loop_remove+0xb0/0xb0 [ 722.662813][T24438] __se_sys_ioctl+0x115/0x190 [ 722.667472][T24438] __x64_sys_ioctl+0x7b/0x90 [ 722.672048][T24438] do_syscall_64+0x34/0x70 [ 722.676461][T24438] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 722.682336][T24438] RIP: 0033:0x7fb457f980f9 [ 722.686734][T24438] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 21:23:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8991, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x891f, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:26 executing program 1: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x338) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) sendmsg$AUDIT_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x3e8, 0x200, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200008b0}, 0x4634c6c13a5a3db7) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x40801) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x84ffe0, 0x0) 21:23:26 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:26 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:26 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 13) [ 722.706325][T24438] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 722.714727][T24438] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 722.722696][T24438] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 722.730663][T24438] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 722.738626][T24438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 722.746615][T24438] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:26 executing program 1: ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x338) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x3e8, 0x200, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200008b0}, 0x4634c6c13a5a3db7) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r1, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x40801) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x84ffe0, 0x0) [ 722.803291][T24451] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 722.808568][T24455] FAULT_INJECTION: forcing a failure. [ 722.808568][T24455] name failslab, interval 1, probability 0, space 0, times 0 [ 722.818671][T24451] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 722.837686][T24455] CPU: 0 PID: 24455 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 722.843904][T24451] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 722.852151][T24455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 722.852158][T24455] Call Trace: [ 722.852178][T24455] dump_stack_lvl+0x1e2/0x24b [ 722.852190][T24455] ? panic+0x7d7/0x7d7 [ 722.852201][T24455] ? bfq_pos_tree_add_move+0x43e/0x43e [ 722.852219][T24455] dump_stack+0x15/0x17 [ 722.852232][T24455] should_fail+0x3c0/0x510 [ 722.852246][T24455] __should_failslab+0x9f/0xe0 [ 722.852260][T24455] should_failslab+0x9/0x20 [ 722.852270][T24455] kmem_cache_alloc+0x3f/0x300 [ 722.852284][T24455] ? mempool_alloc_slab+0x1d/0x30 [ 722.852307][T24455] mempool_alloc_slab+0x1d/0x30 [ 722.920918][T24455] ? mempool_free+0x310/0x310 [ 722.925594][T24455] mempool_init_node+0x1e6/0x4b0 [ 722.930637][T24455] ? mempool_free+0x310/0x310 [ 722.935317][T24455] ? mempool_alloc_slab+0x30/0x30 [ 722.940345][T24455] mempool_init+0x3c/0x50 [ 722.944690][T24455] bioset_init+0x48e/0x640 [ 722.949118][T24455] blk_alloc_queue+0xc6/0x640 [ 722.953797][T24455] ? __mutex_init+0xa1/0xf0 [ 722.958298][T24455] blk_mq_init_queue+0x35/0xc0 [ 722.963059][T24455] loop_add+0x270/0x760 [ 722.967215][T24455] loop_control_ioctl+0x564/0x740 [ 722.972234][T24455] ? loop_remove+0xb0/0xb0 [ 722.976650][T24455] ? __fget_files+0x310/0x370 [ 722.981332][T24455] ? security_file_ioctl+0xb1/0xd0 [ 722.986445][T24455] ? loop_remove+0xb0/0xb0 [ 722.990861][T24455] __se_sys_ioctl+0x115/0x190 [ 722.995536][T24455] __x64_sys_ioctl+0x7b/0x90 [ 723.000123][T24455] do_syscall_64+0x34/0x70 [ 723.004536][T24455] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 723.010437][T24455] RIP: 0033:0x7fb457f980f9 [ 723.014868][T24455] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 723.034485][T24455] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 723.042898][T24455] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 21:23:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8920, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8992, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8993, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:27 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 14) [ 723.050864][T24455] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 723.058863][T24455] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 723.066827][T24455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 723.074812][T24455] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8994, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8995, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89a2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 723.120152][T24472] FAULT_INJECTION: forcing a failure. [ 723.120152][T24472] name failslab, interval 1, probability 0, space 0, times 0 [ 723.134014][T24472] CPU: 1 PID: 24472 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 723.145758][T24472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 723.155828][T24472] Call Trace: [ 723.159139][T24472] dump_stack_lvl+0x1e2/0x24b [ 723.163844][T24472] ? panic+0x7d7/0x7d7 21:23:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89a3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 723.167930][T24472] ? bfq_pos_tree_add_move+0x43e/0x43e [ 723.173411][T24472] dump_stack+0x15/0x17 [ 723.177606][T24472] should_fail+0x3c0/0x510 [ 723.182045][T24472] __should_failslab+0x9f/0xe0 [ 723.186834][T24472] should_failslab+0x9/0x20 [ 723.191358][T24472] kmem_cache_alloc+0x3f/0x300 [ 723.196152][T24472] ? mempool_alloc_slab+0x1d/0x30 [ 723.201172][T24472] ? ____kasan_slab_free+0x10a/0x160 [ 723.206448][T24472] mempool_alloc_slab+0x1d/0x30 [ 723.211313][T24472] ? mempool_free+0x310/0x310 [ 723.215999][T24472] mempool_init_node+0x1e6/0x4b0 [ 723.221022][T24472] ? mempool_free+0x310/0x310 [ 723.225721][T24472] ? mempool_alloc_slab+0x30/0x30 [ 723.230735][T24472] mempool_init+0x3c/0x50 [ 723.235069][T24472] bioset_init+0x48e/0x640 [ 723.239486][T24472] blk_alloc_queue+0xc6/0x640 [ 723.244157][T24472] ? __mutex_init+0xa1/0xf0 [ 723.248650][T24472] blk_mq_init_queue+0x35/0xc0 [ 723.253407][T24472] loop_add+0x270/0x760 [ 723.257575][T24472] loop_control_ioctl+0x564/0x740 [ 723.262592][T24472] ? loop_remove+0xb0/0xb0 [ 723.267011][T24472] ? __fget_files+0x310/0x370 [ 723.271700][T24472] ? security_file_ioctl+0xb1/0xd0 [ 723.276819][T24472] ? loop_remove+0xb0/0xb0 [ 723.281237][T24472] __se_sys_ioctl+0x115/0x190 [ 723.285922][T24472] __x64_sys_ioctl+0x7b/0x90 [ 723.290508][T24472] do_syscall_64+0x34/0x70 [ 723.294913][T24472] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 723.300788][T24472] RIP: 0033:0x7fb457f980f9 [ 723.305189][T24472] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 723.324783][T24472] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 723.333193][T24472] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 723.341156][T24472] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 723.349117][T24472] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 723.357076][T24472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 21:23:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8921, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 723.365036][T24472] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 723.383297][T24458] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 723.397759][T24458] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 723.422557][T24458] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:27 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) splice(r3, &(0x7f00000000c0)=0x6, r2, &(0x7f00000001c0)=0xffff, 0x800, 0x0) r4 = dup3(0xffffffffffffffff, r1, 0x80000) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delneigh={0x30, 0x1d, 0x100, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3}, [@NDA_CACHEINFO={0x14, 0x3, {0x40, 0x4529, 0x1, 0xff}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89b0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:27 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 15) 21:23:27 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:27 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs289PHFUcAPDv7AL9QStY64/Sqhg1En9AoVV78KBGEw+amOihHhFog90WUzCxDVH0UI/axLvxaOJf4EkvRj2ZeNW7adIYLq2e1szuDCx0F1lY2Nr5fJJp35t5m/e+8+btvpnHBFBYw+k/ScSBiPg9Igbq2bUFhuv/3VxenPp7eXEqiWr1rb+SWrkby4tTedH8c/15ZqmeP9qk3vlLl89NViozF7P82ML598fmL11+Zvb85NmZszMXJk6dOnli/PnnJp7tSJxpXDeGPpo7duS1d66+MXX66rs/f5vk8a+Lo0OGNzr4eIcr67aDDemkp4sNoS3liEi7q7c2/geiHKudNxCvftrVxgE7qlqtVmNvy8NLVeAOlkS3WwB0R/5Dn97/5ttuzT1uB9dfqt8ApXHfzLb6kZ4oZWV6193fdtJwRJxe+uerdIudeQ4BALDG9+n85+lm879S3NdQ7q5sDWUwIu6OiEMRcU9EHI6IeyNqZe+PiAfarH/9Ismt85/StS0Ftknp/O+FbG1r7fwvn/3FYDnLHazF35ucma3MHM/OyUj07knz4xvU8cMrv33e6ljj/C/d0vrzuWDWjms9e9Z+ZnpyYXI7MTe6/knEUE+z+JOVlYAkIo5ExNAW65h98ptjrY79d/wb6MA6U/XriCfq/b8U6+LPJRuvT47tjcrM8bH8qrjVL79eebNV/duKvwPS/t/f9PpfiX8waVyvnW+/jit/fNbynmar139f8nYt3Zft+3ByYeHieERf8nq2/8XV/ROrn83zefk0/pFHm4//Q7F6Jo5GRHoRPxgRD0XEw1nbH4mI/i82jv+nlx97b+vx76w0/um2+r/9RPncj9+tqXSwnfjT/j9ZS41kezbz/bfZBm73/AEAAMD/QSkiDkRSGl1Jl0qjo/W/4T8c+0uVufmFp87MfXBhuv6OwGD0lvInXQMNz0PHs9v6PD+xLn8ie278ZXlfLT86NVeZ7nbwUHD9LcZ/6s9yt1sH7Djva0FxGf9QXMY/FJfxD8XVZPzv60Y7gN3X7Pf/4y60A9h95v9QXMY/FJfxD8Vl/EMhbee9fokiJ6J0WzRDYocS3f5mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Ix/AwAA//8zJubz") 21:23:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8922, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89b1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x40049409, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8923, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x40086602, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x40087602, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4020940d, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 723.519520][T24494] syztnl0: mtu greater than device maximum [ 723.530327][T24489] FAULT_INJECTION: forcing a failure. [ 723.530327][T24489] name failslab, interval 1, probability 0, space 0, times 0 [ 723.545421][T24489] CPU: 1 PID: 24489 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 723.557187][T24489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 723.567250][T24489] Call Trace: [ 723.570567][T24489] dump_stack_lvl+0x1e2/0x24b [ 723.575264][T24489] ? bfq_pos_tree_add_move+0x43e/0x43e [ 723.580768][T24489] dump_stack+0x15/0x17 [ 723.582763][T24503] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 723.584934][T24489] should_fail+0x3c0/0x510 [ 723.584951][T24489] ? mempool_init_node+0x12b/0x4b0 [ 723.584972][T24489] __should_failslab+0x9f/0xe0 [ 723.608621][T24489] should_failslab+0x9/0x20 [ 723.613173][T24489] __kmalloc+0x60/0x360 [ 723.617374][T24489] ? ____kasan_slab_free+0x10a/0x160 [ 723.622669][T24489] mempool_init_node+0x12b/0x4b0 [ 723.627592][T24489] ? mempool_alloc_slab+0x30/0x30 [ 723.632602][T24489] ? mempool_free+0x310/0x310 [ 723.637265][T24489] ? mempool_free+0x310/0x310 [ 723.641928][T24489] ? mempool_alloc_slab+0x30/0x30 [ 723.646939][T24489] mempool_init+0x3c/0x50 [ 723.651256][T24489] bioset_init+0x503/0x640 [ 723.655659][T24489] blk_alloc_queue+0xc6/0x640 [ 723.660325][T24489] ? __mutex_init+0xa1/0xf0 [ 723.664815][T24489] blk_mq_init_queue+0x35/0xc0 [ 723.669568][T24489] loop_add+0x270/0x760 [ 723.673720][T24489] loop_control_ioctl+0x564/0x740 [ 723.678746][T24489] ? loop_remove+0xb0/0xb0 [ 723.683153][T24489] ? __fget_files+0x310/0x370 [ 723.687819][T24489] ? security_file_ioctl+0xb1/0xd0 [ 723.692916][T24489] ? loop_remove+0xb0/0xb0 [ 723.697501][T24489] __se_sys_ioctl+0x115/0x190 [ 723.702309][T24489] __x64_sys_ioctl+0x7b/0x90 [ 723.706891][T24489] do_syscall_64+0x34/0x70 [ 723.711298][T24489] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 723.717181][T24489] RIP: 0033:0x7fb457f980f9 [ 723.721600][T24489] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 723.741197][T24489] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 723.749600][T24489] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 723.757567][T24489] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 723.765534][T24489] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 723.773497][T24489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 723.781459][T24489] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 723.804960][T24495] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 723.823964][T24495] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 723.836263][T24492] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 723.849406][T24492] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) 21:23:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8924, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:28 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:28 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 16) 21:23:28 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs289vFFUcAPDv7LZFKNiC+IOCWqPGxh8tLagcPKjRxIMmJnrAY20LqSzU0JoIabR6wKOSeDceTfwLPOnFqCcTr3onJMT0AnpaM7sz7bbs1m677aLz+SQD7828zXvfefN238zrBFBYw+k/ScT+iPg9Igbq2bUFhuv/3VpenPpreXEqiWr1rT+TWrmby4tTedH8c/15ZqmeP9qk3vlLl89NViozF7P82ML598fmL11+Zvb85NmZszMXJk6dOnli/PnnJp7tSJxpXDeHPpo7duS1d66+MXX66rs/f5vk8a+Lo0OGNzr4eIcr67YDDemkp4sNoS3liEi7q7c2/geiHKudNxCvftrVxgE7qlqtVq8dbHl4qQr8jyXR7RYA3ZH/0Kf3v/m2W3OPO8GNl+o3QGnct7KtfqQnSlmZ3nX3t500HBGnl/7+Kt1iZ55DAACs8X06/3m62fyvFPc1lLs7W0MZjIiDEXEoIu6JiMMRcW9Erez9EfFAm/WvXyS5ff5Tur6lwDYpnf+9kK1trZ3/5bO/GCxnuQO1+HuTM7OVmePZORmJ3j1pfnyDOn545bfPWx1rnP+lW1p/PhfM2nG9Z8/az0xPLkxuJ+ZGNz6JGOppFn+yshKQRMSRiBjaYh2zT35zrNWxf49/Ax1YZ6p+HfFEvf+XYl38uWTj9cmxu6Iyc3wsvypu98uvV95sVf+24u+AtP/3Nb3+V+IfTBrXa+fbr+PKH5+1vKfZ6vXfl7xdS/dl+z6cXFi4OB7Rl7ye7X9xdf/E6mfzfF4+jX/k0ebj/1CsnomjEZFexA9GxEMR8XDW9kciov+LjeP/6eXH3tt6/DsrjX+6rf5vP1E+9+N3ayodbCf+tP9P1lIj2Z7NfP9ttoHbPX8AAADwX1CKiP2RlEZX0qXS6Gj9b/gPx75SZW5+4akzcx9cmK6/IzAYvaX8SddAw/PQ8ey2Ps9PrMufyJ4bf1neW8uPTs1VprsdPBRcf4vxn7pW7nbrgB3nfS0oLuMfisv4h+Iy/qG4moz/vd1oB7D7mv3+f9yFdgC7z/wfisv4h+Iy/qG4jH8opO281y9R5ESU7ohmSOxQotvfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xTwAAAP//GzDn5A==") 21:23:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x80086601, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:28 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x15) splice(r3, &(0x7f00000000c0)=0x6, r2, &(0x7f00000001c0)=0xffff, 0x800, 0x0) (async) r4 = dup3(0xffffffffffffffff, r1, 0x80000) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delneigh={0x30, 0x1d, 0x100, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3}, [@NDA_CACHEINFO={0x14, 0x3, {0x40, 0x4529, 0x1, 0xff}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x80087601, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 724.362477][T24525] FAULT_INJECTION: forcing a failure. [ 724.362477][T24525] name failslab, interval 1, probability 0, space 0, times 0 [ 724.367736][T24521] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 724.385234][T24525] CPU: 1 PID: 24525 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 724.396968][T24525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 724.407030][T24525] Call Trace: [ 724.410320][T24525] dump_stack_lvl+0x1e2/0x24b [ 724.414985][T24525] ? panic+0x7d7/0x7d7 [ 724.419050][T24525] ? bfq_pos_tree_add_move+0x43e/0x43e [ 724.424519][T24525] dump_stack+0x15/0x17 [ 724.428668][T24525] should_fail+0x3c0/0x510 [ 724.433071][T24525] __should_failslab+0x9f/0xe0 [ 724.437820][T24525] should_failslab+0x9/0x20 [ 724.442313][T24525] kmem_cache_alloc+0x3f/0x300 [ 724.447064][T24525] ? mempool_alloc_slab+0x1d/0x30 [ 724.452078][T24525] mempool_alloc_slab+0x1d/0x30 [ 724.456921][T24525] ? mempool_free+0x310/0x310 [ 724.461583][T24525] mempool_init_node+0x1e6/0x4b0 [ 724.466518][T24525] ? mempool_free+0x310/0x310 [ 724.471215][T24525] ? mempool_alloc_slab+0x30/0x30 [ 724.476241][T24525] mempool_init+0x3c/0x50 [ 724.480592][T24525] bioset_init+0x503/0x640 [ 724.485110][T24525] blk_alloc_queue+0xc6/0x640 [ 724.489785][T24525] ? __mutex_init+0xa1/0xf0 [ 724.494280][T24525] blk_mq_init_queue+0x35/0xc0 [ 724.499062][T24525] loop_add+0x270/0x760 [ 724.503220][T24525] loop_control_ioctl+0x564/0x740 [ 724.508245][T24525] ? loop_remove+0xb0/0xb0 [ 724.512648][T24525] ? __fget_files+0x310/0x370 [ 724.517314][T24525] ? security_file_ioctl+0xb1/0xd0 [ 724.522411][T24525] ? loop_remove+0xb0/0xb0 [ 724.526815][T24525] __se_sys_ioctl+0x115/0x190 [ 724.531483][T24525] __x64_sys_ioctl+0x7b/0x90 [ 724.536080][T24525] do_syscall_64+0x34/0x70 [ 724.540482][T24525] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 724.546359][T24525] RIP: 0033:0x7fb457f980f9 21:23:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8927, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:28 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 17) [ 724.550760][T24525] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 724.570364][T24525] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 724.578768][T24525] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 724.586726][T24525] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 724.594794][T24525] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 724.602772][T24525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 21:23:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8929, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 724.610740][T24525] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 724.650907][T24529] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 724.657100][T24541] FAULT_INJECTION: forcing a failure. [ 724.657100][T24541] name failslab, interval 1, probability 0, space 0, times 0 [ 724.666421][T24515] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 724.676722][T24541] CPU: 0 PID: 24541 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 724.690724][T24529] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 724.699849][T24541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 724.699856][T24541] Call Trace: [ 724.699877][T24541] dump_stack_lvl+0x1e2/0x24b [ 724.699888][T24541] ? panic+0x7d7/0x7d7 [ 724.699899][T24541] ? bfq_pos_tree_add_move+0x43e/0x43e [ 724.699912][T24541] dump_stack+0x15/0x17 [ 724.699925][T24541] should_fail+0x3c0/0x510 [ 724.699945][T24541] __should_failslab+0x9f/0xe0 [ 724.699959][T24541] should_failslab+0x9/0x20 [ 724.699970][T24541] kmem_cache_alloc+0x3f/0x300 [ 724.699985][T24541] ? mempool_alloc_slab+0x1d/0x30 [ 724.699998][T24541] ? ____kasan_slab_free+0x10a/0x160 [ 724.700013][T24541] mempool_alloc_slab+0x1d/0x30 [ 724.700026][T24541] ? mempool_free+0x310/0x310 [ 724.700040][T24541] mempool_init_node+0x1e6/0x4b0 [ 724.700055][T24541] ? mempool_free+0x310/0x310 [ 724.700067][T24541] ? mempool_alloc_slab+0x30/0x30 [ 724.700080][T24541] mempool_init+0x3c/0x50 [ 724.700093][T24541] bioset_init+0x503/0x640 [ 724.700107][T24541] blk_alloc_queue+0xc6/0x640 [ 724.700128][T24541] ? __mutex_init+0xa1/0xf0 [ 724.717231][T24515] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 724.722309][T24541] blk_mq_init_queue+0x35/0xc0 [ 724.722323][T24541] loop_add+0x270/0x760 [ 724.722338][T24541] loop_control_ioctl+0x564/0x740 [ 724.722363][T24541] ? loop_remove+0xb0/0xb0 [ 724.722376][T24541] ? __fget_files+0x310/0x370 [ 724.722389][T24541] ? security_file_ioctl+0xb1/0xd0 [ 724.722409][T24541] ? loop_remove+0xb0/0xb0 [ 724.859102][T24541] __se_sys_ioctl+0x115/0x190 [ 724.863775][T24541] __x64_sys_ioctl+0x7b/0x90 [ 724.868354][T24541] do_syscall_64+0x34/0x70 [ 724.872761][T24541] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 724.878642][T24541] RIP: 0033:0x7fb457f980f9 [ 724.883047][T24541] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 724.902638][T24541] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 724.911047][T24541] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 724.919008][T24541] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 724.926968][T24541] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 724.934930][T24541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 724.942892][T24541] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:29 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x15) splice(r3, &(0x7f00000000c0)=0x6, r2, &(0x7f00000001c0)=0xffff, 0x800, 0x0) (async) r4 = dup3(0xffffffffffffffff, r1, 0x80000) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delneigh={0x30, 0x1d, 0x100, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3}, [@NDA_CACHEINFO={0x14, 0x3, {0x40, 0x4529, 0x1, 0xff}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8930, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc020660b, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:29 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 18) 21:23:29 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:29 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8931, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 725.203570][T24552] FAULT_INJECTION: forcing a failure. [ 725.203570][T24552] name failslab, interval 1, probability 0, space 0, times 0 [ 725.219657][T24552] CPU: 1 PID: 24552 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 725.229771][T24561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 725.231471][T24552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 725.231477][T24552] Call Trace: [ 725.231505][T24552] dump_stack_lvl+0x1e2/0x24b [ 725.259401][T24552] ? bfq_pos_tree_add_move+0x43e/0x43e [ 725.265118][T24552] ? kmem_cache_alloc+0x1a4/0x300 [ 725.270134][T24552] ? ____kasan_slab_free+0x10a/0x160 [ 725.275414][T24552] dump_stack+0x15/0x17 [ 725.279567][T24552] should_fail+0x3c0/0x510 [ 725.283993][T24552] ? bdi_alloc+0x4e/0x110 [ 725.288316][T24552] __should_failslab+0x9f/0xe0 [ 725.293065][T24552] should_failslab+0x9/0x20 [ 725.297560][T24552] kmem_cache_alloc_trace+0x3a/0x330 [ 725.302832][T24552] ? bioset_init+0x54a/0x640 [ 725.307413][T24552] bdi_alloc+0x4e/0x110 [ 725.311568][T24552] blk_alloc_queue+0x111/0x640 [ 725.316356][T24552] ? __mutex_init+0xa1/0xf0 [ 725.320870][T24552] blk_mq_init_queue+0x35/0xc0 [ 725.325621][T24552] loop_add+0x270/0x760 [ 725.329778][T24552] loop_control_ioctl+0x564/0x740 [ 725.335327][T24552] ? loop_remove+0xb0/0xb0 [ 725.339749][T24552] ? __fget_files+0x310/0x370 [ 725.344509][T24552] ? security_file_ioctl+0xb1/0xd0 [ 725.349606][T24552] ? loop_remove+0xb0/0xb0 [ 725.354024][T24552] __se_sys_ioctl+0x115/0x190 [ 725.358684][T24552] __x64_sys_ioctl+0x7b/0x90 [ 725.363263][T24552] do_syscall_64+0x34/0x70 [ 725.367693][T24552] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 725.373574][T24552] RIP: 0033:0x7fb457f980f9 [ 725.377980][T24552] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 21:23:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8932, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:29 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 19) [ 725.397579][T24552] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 725.405987][T24552] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 725.413983][T24552] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 725.421977][T24552] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 725.429962][T24552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 725.438028][T24552] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 725.484316][T24550] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 725.497417][T24556] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 725.499347][T24550] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 725.516667][T24575] FAULT_INJECTION: forcing a failure. [ 725.516667][T24575] name failslab, interval 1, probability 0, space 0, times 0 [ 725.522988][T24556] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 725.548556][T24575] CPU: 0 PID: 24575 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 725.560279][T24575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 725.570323][T24575] Call Trace: [ 725.573608][T24575] dump_stack_lvl+0x1e2/0x24b [ 725.578268][T24575] ? panic+0x7d7/0x7d7 [ 725.582457][T24575] ? bfq_pos_tree_add_move+0x43e/0x43e [ 725.587914][T24575] dump_stack+0x15/0x17 [ 725.592071][T24575] should_fail+0x3c0/0x510 [ 725.596511][T24575] ? blk_alloc_queue_stats+0x4c/0x100 [ 725.601910][T24575] __should_failslab+0x9f/0xe0 [ 725.606676][T24575] should_failslab+0x9/0x20 [ 725.611192][T24575] kmem_cache_alloc_trace+0x3a/0x330 [ 725.616469][T24575] ? bdi_init+0x239/0x370 [ 725.620808][T24575] blk_alloc_queue_stats+0x4c/0x100 [ 725.625999][T24575] blk_alloc_queue+0x151/0x640 [ 725.630766][T24575] ? __mutex_init+0xa1/0xf0 [ 725.635260][T24575] blk_mq_init_queue+0x35/0xc0 [ 725.640027][T24575] loop_add+0x270/0x760 [ 725.644174][T24575] loop_control_ioctl+0x564/0x740 [ 725.649219][T24575] ? loop_remove+0xb0/0xb0 [ 725.653628][T24575] ? __fget_files+0x310/0x370 [ 725.658291][T24575] ? security_file_ioctl+0xb1/0xd0 [ 725.663389][T24575] ? loop_remove+0xb0/0xb0 [ 725.667795][T24575] __se_sys_ioctl+0x115/0x190 [ 725.672460][T24575] __x64_sys_ioctl+0x7b/0x90 [ 725.677054][T24575] do_syscall_64+0x34/0x70 [ 725.681468][T24575] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 725.687354][T24575] RIP: 0033:0x7fb457f980f9 [ 725.691768][T24575] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 725.711384][T24575] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 725.719808][T24575] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 725.727766][T24575] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 725.735736][T24575] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 725.743703][T24575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 725.751668][T24575] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8933, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:29 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 20) 21:23:29 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs271vHEUbAPBn7+zkTZy8NiF8xAlgBAiLDzt2AqSgAAQSBUhIUASJxthOZHKJUWwkEllgKEIJkegRJRJ/ARU0CKiQaKFHkSLkJoHq0N7t2ufLnfHZZ19gfz9pk5ndOc08Ozt3szveAAprJP0niTgQEb9GxGA9u77ASP2/mytL03+uLE0nUa2+/kdSK3djZWk6L5p/biDPLNfzR1vUu3Dp8rmpSmX2YpYfXzz/7vjCpctPzp2fOjt7dvbC5KlTJ09MPPP05FNdiTON68bwB/PHjrz85tVXp09fffvHr5M8/qY4umRko4OPdLmyXjvYkE76etgQOlKOiLS7+mvjfzDKsdZ5g/HSxz1tHLCjqtVqdW/7w29Vgf+wJHrdAqA38h/69P4333Zp6nFbuP58/QYojftmttWP9EUpK9PfdH/bTSMRcXr5ry/SLXbmOQQAwDrfpvOfJ1rN/0pxd0O5/2drKEMRcUdEHIqIOyPicETcFVEre09E3Nth/c2LJLfOf0rXthTYJqXzv2ezta3187989hdD5Sx3sBZ/f3JmrjJ7PDsno9G/N81PbFDHdy/+8mm7Y43zv3RL68/nglk7rvU1PaCbmVqc2k7Mja5/FDHc1yr+ZHUlIImIIxExvMU65h776li7Y/8c/wa6sM5U/TLi0Xr/L0dT/Llk4/XJ8f9FZfb4eH5V3Oqnn6+81q7+bcXfBWn/7295/a/GP5Q0rtcudF7Hld8+aXtPs9Xrf0/yRi29J9v3/tTi4sWJiD3JK9n+59b2T659Ns/n5dP4Rx9qPf4PxdqZOBoR6UV8X0TcHxEPZG1/MCIGPts4/h9eePidrce/s9L4Zzrq/84T5XPff7Ou0qFO4k/7/2QtNZrt2cz332YbuN3zBwAAAP8GpYg4EElpbDVdKo2N1f+G/3DsL1XmFxYfPzP/3oWZ+jsCQ9Ffyp90DTY8D53Ibuvz/GRT/kT23Pjz8r5afmx6vjLT6+Ch4AbajP/U7+Vetw7Ycd7XguIy/qG4jH8oLuMfiqvF+N/Xi3YAu6/V7/+HPWgHsPvM/6G4jH8oLuMfisv4h0Laznv9EkVOROm2aIbEDiV6/c0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHX8HAAD//+rx5s4=") 21:23:29 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:30 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f00000000c0)={0xffff, 0x3f, 0x5e}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = gettid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1f3cd45b4043b97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r8, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r8, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1fbcd65b404bb97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r12) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r13) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)=[{&(0x7f0000000240)={0x134c, 0x32, 0x2, 0x70bd27, 0x25dfdbff, "", [@generic="fb32d4ff8a81e5a39154ee53dd1e735ad24a33b71f5b1a37956596a5286053d905fd01b050daa7f29fabe3f6b2721b64d8a0ef9a43b8865cdb0cce9ee862d4c57e645563b12759a906bcbc808e21f618a57b42eee82d1ef86a3347af6d98e8ad20ab6a176d924437f399f94e8b2bce", @nested={0x12bd, 0x5b, 0x0, 0x1, [@typed={0xa8, 0x57, 0x0, 0x0, @binary="fa8777736b17e88b0db78a3a98835cf116de53b33d4ce87348b4e6b55fc5d2bf09d6ad42c9038ffedaefcf0ae10ad7a7e7c1284bd3d94c3331a3143919d08604a5c3719d6c4f14919450b10cfde03f27f602908e2fb3ae4da4119a05a48d862cedec8e72de6117d91bcbdd002693fd7171f4257c4fdee265d94ca3374a683bda2aae881f5f1bf6276d9d55b738f51a5d937f07de91dee5e86666cf928eacd57df7e30369"}, @typed={0x8, 0x8, 0x0, 0x0, @ipv4=@multicast2}, @generic="d15b96eef9d814a97a678ce6ff44adf05ca20cb7ab066727f6ebfbabf4d3b2c55ddd1fdf2c68e22c77afdcdf393a91379f", @generic="b8e7d514616d6fc144ad800606c0abd35477b850486ef6b89873f1f65b63ab6af0cd0b40de61564903a6636fb98ddb90d40ae52aebc87ff22260d3bafcbd86bb95ba93976772c3525929632d62e743916251cec56cd94d56a22873364daa11771da9c5b5e85c016c0ce04b722e9e666e8fc2af172a1a966e3c44093cc9c7a5ed4a0fbf4ce018314fec51fb9b66b3f126637899a4459b72dd3826e0f1a40beca0a57bcf8d6c4947a8b11751af5b9ffe59b66c1ace6914b8c482db6a2a35ab3b8626ed68d8ca0726d5ed61402936e387757380d7aa071dc66fb8ddb8105a32ae70f4f7d9c5fa550e7e85ab27a4a2cebe71904bf6", @generic="72578600a251adc0b1e45e90bd45de9f0885e5f5f612c5c06238983329c3fd8e8c672b78f42f739ea959f400e1d0bddbb32dab326c40828631bc6b534d2ee9f571b53c4816bb91acbef7fe3b3007cfe54ff6658d77bc450a7511f62e3def887d51160596754ca0aa9c2947c116a08575affa986c2c0235289ae082ffb49d5dd01e29b7e0ba98a660427ba8a992361bd0de070ba8941dce5e1856fa47effe74d71bc1de1c04a9e90bc58c2b08061fd0", @generic="501788f8cbbfd7c9a0cb0eccfede3d6d2401f5341435eca29101d456a893c241e3e1f76151a248903d5fe382355d862eb37e3f25129d495607012cac27ff00cad802a00d30a56cf376d3afcd5913c58755e601538e905a3f16fe2cfeae350ffc08588b546bc4ec6c7936d043860ffa15d7bb4ebb26e06198dc8b1ceb7035b1048a96a9c68a0a8da33208aa5b384ac1b3715822c9e28f3edcc2d27a431ae5a06588ee0d7498b08beb5fe068a7b7abc58831f7c5172865fd2df8cb439e5cf73f96c4859d7b0d4c7df0a000125f0f7b2d486e8a638766e0928aae8e4092feb31921d01a50732581f016858ed47dfe9ac20068df6391db541aad108ddf5771382975ea424966912c9d27ddf9cd72f91d892a29c44dd6a3dd37f5736681f729ff4a494e707424d37ba37c644018fe713f02ff85ed1ec028f69092a0fdacc49b67ad7380af1aa6d904c3adcfa0a572489add39f1b9f344191c45116f45611c16a1bb779fa7955cf38de910ab31cc951367f992d77382c0ffa74a1359e20f9a4aade5e77618e5859ead56d418b436230837a469e242a603f8397a819a0ccda4b146c8475e99fdc598a000cf27b8d5e5f38d3d27662b40bb354a95e97b1c264647c031ab7e27098bd78b9d9661228e402de85f6b0eb9b5101ab6a572f182d1cf3bc2a8d87adbcae60e979cfeddfbbc29887068566ae7d6e11fe478ef52b595a4634d91278ee09ca99b516510dc4e7c67d5c24e2e0b608eea102d55e4e9f49a52e7a818229755c782fe3ebdbaf42703dec74729022a08091a8415f64c26f77633ce50470ea81a0bec1f404c8bda90fb209bb6298b90845903b19f90efb5d5c076a5d09b2e5079b2bf04f1e6e6dc7d1260fb530ee07994dbaa91df2f7a127f887529d5a8dd74cfd4d363473788723d6445f8d1dc9966b63ef723e8045dd544615e2309017d6b8250d7a9642df0554ad927b877ce1e2d60ed8b55f2e017cd53b7831a0289457ff17fab7f21b60e204b60ad5642d50966cce3306c38237a227d0dfe76deede901b87f401ba759d87b9bde0919fc761a319da4ad754d745fd1573fd70e29d5f145775b6f92aacfd8d0ba5d4c5028d6c21f54f7c50e997f5edb20edd85f155813b4a9db9c368e1df6e5fb54aace15f086adfadd2d6391c86c4834b90292e069fa1c7a7b2f9b752c7bdafa7575ce9150b0ed0babe7413aee5d18b9e76c59c42b14cddaebea304ec76ee98347b9932efbc4f29e50569c3ce6594c5d743c60459d5c50edb8ae26355c94bb2a7ef9b52bd52ecb9290fdcaf4dad8851f0100aca5445c48815c17fbe795d3fe7bb6a9f80042f3375fc76af3ee769c36b766f0c873ef6dc5c3bde0183e038b499ae9caeb149561b802b27e52c93410f12fe6aa5a3b294c214c5282ddc20d3c2e58a116351a48cf2ca8bc78799629f4e449408f50e244d5b32f623c4e751c9c17a63d32644b503c1c853390b927944bf4f600a40d81d355ea29dfcf50ac2fe0806a611ac1bf8066cc69baf653dc010e78b6cb8f6d77ee6b6178e1ebc50090a668055d4272fb36d3e1f35b9a1314647e316f9fd8c35fb9df9089b44638a64bcbac9521bd2ea7f237745cc4fb178633b06383d62f62ac50921ab9214e945af6da80503c3b848a47c76559073dc41d81828b325e4d4afc3a7d48d67faf3e177fb568803f9cb6d531d5e0a1840db78cd64ba8bef15b7a932f936dea1ecc5bd9d5521949176144d7546802a06e4fc048b9150bd10f13a094f209308cd615c68a52a74d5574de7c37d490025f43756ae11fe28090b6c51f3798b4527d7f65dca6877e3ebe70f8061f007135a1bab72e2e8de9f0ce2a5735ee91d02e9b30b3b17036b59655a356e6e28b3a22cd594b087427525e8d69d7f9aea9811f4ba9d59dadb47caa56c0e58ce391200806255638395f61fea7dd6c6b48ec7c4b3d63ee45e3ec34398ebcef009921d833884fc3e0b70526eb996e81d287baa7e050f8fb8a357c19acb82da4445232fe8df7e784e05cc63f0f3a52ce1ced846442e088a3b2f1995b7d00a72dde9aac2788f4bec0ea2c75976f50ec9861e1eafeafcc8bb45c7efbbfcef078848a75582131bd40bb08423321b08e8577a7e134a455bb4f94841cdc754089cbc53f75c2bd9cc089a009a062d7c64f562184c1931d115e773f5c00b51e5e3739afc5622bd0131ae872545243bd35a5af396cf68dc535f281d3f631bad683d999156bca5049d3e01a837de68027e57d00fe91102eac867450370e15b056aa00a49ff2417ed62adbc3236bc6a199c5eae510c7d1b8454f6a4274cc54d577073bda41b8bc8409017ecd1c16da2ee12a3932c971d4ef0c0113579f700f9885914cb42f4152ed87109a464cd78b43f4cf78489b1b32bd94766ee3ac8570032e456d7cc4c953c066589d7b9cb71770cacb1cd96a8c977a3db13d3bf66735f8212c910d1b4053195e5b73c7a23a8f2e5e43a41fda30da0773db520cd415ff1db371ecca0901efa999fe5cf813b1069e68a79ed715c279f20b941b70c8b78956cb5706eb0cf7b69674be966c2ecb334b5edd4f93b343f5f599ba32e6444c29a55d074d06f310c05e8f66a341421bb046c5a893ed39a95ed381d6a9f6e00dcf8dce7d5a5b7c3566a0310ccaeaba182ef831e661c5c4d68bf5d053a941a0caf245df5835e2ec2fc842eee60a2271a2593ec54631920f30498db2a532327f8d4d8fc536ce9018acfc0e11da5b5f5f149762f713fa24addeead40dd2ba70e4f98c07ed4b8f5dd47ead52c69a9bc51ce5e5d101d622d9e80cb5cf0ca3bb8cc07fa44ba958880cd904ae70aec600001bae6c5be3bb9b13e0a2fbfaf9ae546f52d7b7a8db167148642d63d8956bc2d7ed31db3f2cedc4bae6f78653eb798700ab044a621c694ecbb5b06fa17bff52db5af42c20c51b449f4ceee1b445404a4bc8adc6f2194e55d31d299c162656fbedef867f4b56eb8cc5aed54565b34ab538c65ef725874f74582cae6c1b70416049008170a6531dd47be03dc883b290840946bbce4c56691f118b26025b08ea3b1c95f30db07a84086f4ee2bc8e78e068dd19a25c30c19fdf47feda81936093bfb5af650d74744237cc2228dba995852a926e75c5ed0cf8b79916ee5cc0fee896dddcab9a26ccd831a025a537f2a131dd0f9171ba5dd93cb16491a591bfd08b71d8a29bae8676e28a527eaef3ba71c21ea0702b47f1ed306fca543390820b94f5a047dd1bac78545f0c6497eaf84f034e6e5c5d340a84996a88843ab8ecac89f523b8c274152d3842b9584d2bac52b83a48428fec4e4d562960dfa0073f10b908ec8658db2536bd6e3004f8300ff27963cf02eea433bd42b696c79d7ede631043c8eaccfd60cc25268a1aa6a177af8bb2280189d73bfe5909e07296d33c4248fcb3d47a062c29a5fcd354801b9b163bd08068bf986ab8c88bfb800f414cf41b22aaf8c9e922d8548c19f15cae026a0a899fc37ff3dcf2ce9eb30188c90cb65f6fe5aa9c6df6d36ebe7b70a1e32c14a82936a7cff0797f02ba1ecfede825d9ab534eb2ebaf80a40bcec094db32436402bdf165ef2b73bd4472a3fe7abc0494cd227eb4088d3e04e8541ca83e089d55c504d999d3e509f708b1348a11e9b192eac86b54422f35e1a67353953a09c4906715b6a35c0d1e6db5451cbd07bdd97353b856f7afebd009e8690902db9b01ee64285ac43d01b73ca706d35d68d1c67ab4505001de2ed02181fd9d8d4df16958eb11eecd352e19c91bf1db3b89471c7601660c1d2eaa9c5742f856cf544b197c8c94c5609b6d207b7f7919fcf19742f21128bf06e80aee56458d39d0c574f496a953e808f0ef71714dadb9c75d781e43ca548a20342547f9c64a7ef1c90c7b9c3b68b6a079e8c360f38049a273fdec1650c4bf29b5806bfd877109008c7c600541896df10e1b701f8452cd9b156e93d724b86d567364a0b6f41195ccd924528abf5f90f37af59a37bc816b0b04ff0786eba3e08533fab2e129a8d7dac2048be270fa5adc0f9f0972920b04f826f9da4f013fb75152e38400f808c3cab0c12f9c91f429813ea0d80178b3be3d935ea795e4046f38e0e97a0b9bb36b6a486020c9c923acae36e9b36a8c0a82d7453a9df34d0fc9b0424a5c520cd44a2966369ad4b14aa99c0a7cf8f380a3d8f6d7945bd384791a1e3cc0a3deeaaf7e122d008abb55e12baeaa1cc7310cdb54d74ea4d805d9723db50650bb9797d7c85f69d527a9f6f35513f87024a002a7bd15c5064ec499ee3d31a6a512695cc7d4cabe0e1328e7d02d7ec22038338983f21841d8707c28eb8136db30f4c5ac9d442a4917d89d61c47cec4a4f576f54a7121d96e6dbb1faa40a2c6071c908f538f20def3113afb0224bb075ac7ab49c4778c5c2e7dd3736bfac458b8f431441539fe02b6a5edd0df3a4a67cc5a0c9739c063e87b556fcbe0fa8310e7da5c056955cfc4531b46d9abe9d431de9e183bdcf3e7c53f9f30a923478eede6cca5adddf9fbce10acb040803b226be60b81298289251e640aaed8d07415888db86e15d8aa5b492d883c0fbdf3d5820f4fc4ae4bd0de7e3f37b3f0ba6e309dd7b3e492faa69a1c9b8fdc316c84072e31f1ad789731252a7854c2910031184be94c7679958771160de83db595f4fd89ec62191e376c4c66200012551a7d71689b1767dc0c354b78d366f19cf10f472254ca241726565a2a2685ba3f2ebe4b01291481eb9d399dc2a1283161ab044831524d1bd883eda650adc4864746f4b0030e0aa0226a547054123ec1ec0a3b0bb60fcaec7670eeeb54fbf4182967a49180b1c7c94da0968e063d93f155b4e022327a9b46242c1a061fc4db8a0107b43d13ecfcb0a2c95a90080dfdb6405ec11878ee7de5d65e2d8c6b5bb59cd44c05504094361b01a5bf3431316dc3be1b78980f960dcff951bc739133a6e67c46b171e429b0098fd5028554703bd4562b85519f390e5ca54b181afdc66ab4bd3e07882bd407226abd39c7988415afd74ba9f1b01b688470a724f4ea6bcb10754737d8c9941a40b416188f1c7ecbc57077c56823251e38359149aa35c663c498c0dc6fac2e1e339183ac5ce77ca12529748ffdd2036324bc577e85ee379d61c0558e1eb28278e2e845d0998741e042f34a1ee0e206813348518be89ddb19f150942da8cec54c15a64ab3838cd285da24612679467628bd03ced26fec63e8b39ba657b6394f1b2a99a35ce8f9210fc68c25b2bb87eb8846751a55a6ce75d171123b2329c17d1fb1fb005c20330149967c0e967d2caaa0cd54d20997af869129b4b8ae998fd9f213294f1180d6bc7a7092562af3407231ebd673ccc7c4e3b0e507adba73385bdeac2aaf46d62b9a76bb44f850737e375520a4e3e2483b9332ee705b61327f68798e6d1b026e227297cade692cb9e80968b89c94e486be5422bc8fdea8633fd709a122ec3b6635b592a5311cc80a91adcb86cac2b8c6c53c3f42255a8ccbd72e79dcba33d89493d66542f7b543080b249b971a448246c99754455d70cb777bf97e6d4f7d9d04cc04ccb6f25fdb400d98e9634c0c94edaa129cb4f8e2bc27925b08045a4d5ca51114954a6eafee8908765ae3be8759bd96bda7470d80e5c5b9929bbaa0d99aa9b90d47cd7b5d36d9299c598632d9fba11c272962fe10a0172ee463ee7deb601fc54377f6ee94dad1041b20164f43452155a2367b7846933ed03d22e4a53113c4d5b2a9f133d8b62351a631a4fa482ba231e1374b074a48a107a44266c6642813899966e10", @generic="0c88d3862d0199e9391c96914119fdb00e39802e89d9f1a3906fa2888e80520379c3e33befc4af7292ca07a4fd33894e3de98c036440"]}, @typed={0xc, 0x60, 0x0, 0x0, @u64=0xfffffffffffffff9}]}, 0x134c}, {&(0x7f00000015c0)={0x208, 0x42, 0x321, 0x70bd2b, 0x25dedbfe, "", [@nested={0x1d5, 0x96, 0x0, 0x1, [@generic="08e3af58fb46bc8c34aecae7665afeccea11b715933399f20d0ff8700aa912c61c7dc4ac5d40c3cb23884d2fe9851a8f605ae75a20fd0e66d888391f14dd41489e69d47a177bd505b5c73be07139d464b14102f35b9b9ac3c4e525578b2913b021b2a6873a80efad7d24ab723cc2c66f2879061682cb546786eb37b77a3599db7655ba861a738d00bc79a2ac31", @typed={0x8, 0x52, 0x0, 0x0, @pid=r3}, @generic="3d80e173f6ee5ecc4945852affaff397eb2c7163fe2ee8581759b417636b296146e019241e9409706fa833bcdd26e03142de4486e32a50da1fa46b4a8ac5db9d56c3cc59d90f9b1bf37f1f2fedab75dadac79236006b44f1b32c271dbf3cfd718a8082677bd71a0578aa6c65a327a37152f23ab3e5f853cec5e7e872e1e834128054aabbdcad7af716631989ed02cd2b595f9252f903e2e99730b5c809a03be8c313cba75a2a9eebd17820cd88d9db1604740078c3e21f", @generic, @typed={0x8, 0x22, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x26, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x3a, 0x0, 0x0, @uid}, @generic="773dfe0d4112c40db289e6cfa6c0f0bd9a31fe21c45c97b1819797ecb800dd09411be34f4a83fdbeca3aec7377dd39bccfcac92bca40b7c6ede00f59fa333675cc8268ed2d824018aba48348524baf4b8e78c326811d5fee4d496d654de8f7b8a7e903b0c7"]}, @typed={0x4, 0x4d}, @generic="331d3ee024a4b8591ed660a7c6ded18ef2d830d3e9d3e122c78d79"]}, 0x208}], 0x2, &(0x7f00000018c0)=[@rights={{0x28, 0x1, 0x1, [r1, r2, r12, r13, r1, r0]}}], 0x28, 0x8000}, 0x40) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) fcntl$setflags(r1, 0x2, 0x0) 21:23:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8937, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 726.082369][T24587] FAULT_INJECTION: forcing a failure. [ 726.082369][T24587] name failslab, interval 1, probability 0, space 0, times 0 [ 726.095564][T24587] CPU: 0 PID: 24587 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 726.107294][T24587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 726.122409][T24587] Call Trace: [ 726.125717][T24587] dump_stack_lvl+0x1e2/0x24b 21:23:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 726.130408][T24587] ? panic+0x7d7/0x7d7 [ 726.134501][T24587] ? bfq_pos_tree_add_move+0x43e/0x43e [ 726.140157][T24587] ? find_next_bit+0xd6/0x120 [ 726.144856][T24587] ? cpumask_next+0x11/0x30 [ 726.149397][T24587] dump_stack+0x15/0x17 [ 726.153577][T24587] should_fail+0x3c0/0x510 [ 726.158011][T24587] ? percpu_ref_init+0xd0/0x340 [ 726.162879][T24587] __should_failslab+0x9f/0xe0 [ 726.167662][T24587] should_failslab+0x9/0x20 [ 726.172179][T24587] kmem_cache_alloc_trace+0x3a/0x330 [ 726.177486][T24587] percpu_ref_init+0xd0/0x340 [ 726.182181][T24587] ? blk_timeout_work+0x10/0x10 [ 726.187046][T24587] ? __kasan_check_write+0x14/0x20 [ 726.192309][T24587] blk_alloc_queue+0x440/0x640 [ 726.197352][T24587] blk_mq_init_queue+0x35/0xc0 [ 726.202263][T24587] loop_add+0x270/0x760 [ 726.206439][T24587] loop_control_ioctl+0x564/0x740 [ 726.211492][T24587] ? loop_remove+0xb0/0xb0 [ 726.215915][T24587] ? __fget_files+0x310/0x370 [ 726.220638][T24587] ? security_file_ioctl+0xb1/0xd0 [ 726.225760][T24587] ? loop_remove+0xb0/0xb0 [ 726.230175][T24587] __se_sys_ioctl+0x115/0x190 [ 726.234996][T24587] __x64_sys_ioctl+0x7b/0x90 [ 726.239585][T24587] do_syscall_64+0x34/0x70 [ 726.243996][T24587] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 726.249882][T24587] RIP: 0033:0x7fb457f980f9 [ 726.254310][T24587] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 726.273913][T24587] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:23:30 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 21) [ 726.282534][T24587] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 726.290495][T24587] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 726.298475][T24587] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.306448][T24587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 726.314417][T24587] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 726.353514][T24586] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 726.355552][T24613] FAULT_INJECTION: forcing a failure. [ 726.355552][T24613] name failslab, interval 1, probability 0, space 0, times 0 [ 726.366255][T24586] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 726.381699][T24613] CPU: 1 PID: 24613 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 726.393052][T24584] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 726.402823][T24613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 726.402829][T24613] Call Trace: [ 726.402848][T24613] dump_stack_lvl+0x1e2/0x24b [ 726.402870][T24613] ? bfq_pos_tree_add_move+0x43e/0x43e [ 726.415680][T24584] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 726.425145][T24613] dump_stack+0x15/0x17 [ 726.425159][T24613] should_fail+0x3c0/0x510 [ 726.425172][T24613] ? blkg_alloc+0x87/0x5a0 [ 726.425193][T24613] __should_failslab+0x9f/0xe0 [ 726.468398][T24613] should_failslab+0x9/0x20 [ 726.472898][T24613] kmem_cache_alloc_trace+0x3a/0x330 [ 726.478176][T24613] ? __kasan_kmalloc+0x9/0x10 [ 726.482863][T24613] blkg_alloc+0x87/0x5a0 [ 726.487100][T24613] blkcg_init_queue+0x27/0x1d0 [ 726.491872][T24613] blk_alloc_queue+0x49b/0x640 [ 726.496629][T24613] blk_mq_init_queue+0x35/0xc0 [ 726.501383][T24613] loop_add+0x270/0x760 [ 726.505532][T24613] loop_control_ioctl+0x564/0x740 [ 726.510555][T24613] ? loop_remove+0xb0/0xb0 [ 726.514963][T24613] ? __fget_files+0x310/0x370 [ 726.519635][T24613] ? security_file_ioctl+0xb1/0xd0 [ 726.524739][T24613] ? loop_remove+0xb0/0xb0 [ 726.529143][T24613] __se_sys_ioctl+0x115/0x190 [ 726.533808][T24613] __x64_sys_ioctl+0x7b/0x90 [ 726.538389][T24613] do_syscall_64+0x34/0x70 [ 726.542799][T24613] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 726.548677][T24613] RIP: 0033:0x7fb457f980f9 [ 726.553085][T24613] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 726.572684][T24613] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.581087][T24613] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 726.589049][T24613] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 726.597204][T24613] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.605167][T24613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 726.613326][T24613] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8942, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:30 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs271vHEUbAPBn72znTZy8dkL4iBPACBAWH3bsBEhBAQgkCpCQoAilsZ3I5BKj2EgkssBQhBIi0SNKJP4CKmgQUCHRQo8iWchNAtWhvdu1z86d8dlnX2B/P2mTmd05zTw7O3ezO94ACms4/SeJOBgRv0bEQD27vsBw/b9bK4tTf64sTiVRrb7xR1Ird3NlcSovmn+uP88s1fPHm9Q7f+XqhclKZeZylh9buPju2PyVq0/NXpw8P3N+5tLEmTOnT40/+8zE0x2JM43r5tAHcyeOvfLW9demzl5/+8evkzz+DXF0yPBmBx/tcGXddqghnfR0sSG0pRwRaXf11sb/QJRjrfMG4uWPu9o4YFdVq9Xq8uGWh5eqwH9YEt1uAdAd+Q99ev+bb3s197gTLL9QvwFK476VbfUjPVHKyvRuuL/tpOGIOLv01xfpFrvzHAIAYJ1v0/nPk83mf6W4p6Hc/7M1lMGIOBwRRyLirog4GhF3R9TK3hsR97VZ/8ZFktvnP6Ub2wpsi9L533PZ2tb6+V8++4vBcpY7VIu/Nzk3W5k5mZ2Tkejdl+bHN6nju5d++bTVscb5X7ql9edzwawdN3r2rf/M9OTC5E5ibrT8UcRQT7P4k9WVgCQijkXE0DbrmH38qxOtjv1z/JvowDpT9cuIx+r9vxQb4s8lm69Pjv0vKjMnx/Kr4nY//Xzt9Vb17yj+Dkj7/0DT6381/sGkcb12vv06rv32Sct7mu1e/33Jm7V0X7bv/cmFhcvjEX3Jq9n+59f2T6x9Ns/n5dP4Rx5uPv6PxNqZOB4R6UV8f0Q8EBEPZm1/KCL6P9s8/h9efOSd7ce/u9L4p9vq//YT5Qvff7Ou0sF24k/7/3QtNZLt2cr331YbuNPzBwAAAP8GpYg4GElpdDVdKo2O1v+G/2gcKFXm5heeODf33qXp+jsCg9Fbyp90DTQ8Dx3Pbuvz/MSG/KnsufHn5f21/OjUXGW628FDwfW3GP+p38vdbh2w67yvBcVl/ENxGf9QXMY/FFeT8b+/G+0A9l6z3/8Pu9AOYO+Z/0NxGf9QXMY/FJfxD4W0k/f6JYqciNId0QyJXUp0+5sJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgM/4OAAD//+A55+k=") 21:23:30 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 22) 21:23:30 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8943, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:30 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f00000000c0)={0xffff, 0x3f, 0x5e}) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x1}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) r3 = gettid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1f3cd45b4043b97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r8, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(r8, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1fbcd65b404bb97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) (async, rerun: 32) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) dup(r12) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r13) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)=[{&(0x7f0000000240)={0x134c, 0x32, 0x2, 0x70bd27, 0x25dfdbff, "", [@generic="fb32d4ff8a81e5a39154ee53dd1e735ad24a33b71f5b1a37956596a5286053d905fd01b050daa7f29fabe3f6b2721b64d8a0ef9a43b8865cdb0cce9ee862d4c57e645563b12759a906bcbc808e21f618a57b42eee82d1ef86a3347af6d98e8ad20ab6a176d924437f399f94e8b2bce", @nested={0x12bd, 0x5b, 0x0, 0x1, [@typed={0xa8, 0x57, 0x0, 0x0, @binary="fa8777736b17e88b0db78a3a98835cf116de53b33d4ce87348b4e6b55fc5d2bf09d6ad42c9038ffedaefcf0ae10ad7a7e7c1284bd3d94c3331a3143919d08604a5c3719d6c4f14919450b10cfde03f27f602908e2fb3ae4da4119a05a48d862cedec8e72de6117d91bcbdd002693fd7171f4257c4fdee265d94ca3374a683bda2aae881f5f1bf6276d9d55b738f51a5d937f07de91dee5e86666cf928eacd57df7e30369"}, @typed={0x8, 0x8, 0x0, 0x0, @ipv4=@multicast2}, @generic="d15b96eef9d814a97a678ce6ff44adf05ca20cb7ab066727f6ebfbabf4d3b2c55ddd1fdf2c68e22c77afdcdf393a91379f", @generic="b8e7d514616d6fc144ad800606c0abd35477b850486ef6b89873f1f65b63ab6af0cd0b40de61564903a6636fb98ddb90d40ae52aebc87ff22260d3bafcbd86bb95ba93976772c3525929632d62e743916251cec56cd94d56a22873364daa11771da9c5b5e85c016c0ce04b722e9e666e8fc2af172a1a966e3c44093cc9c7a5ed4a0fbf4ce018314fec51fb9b66b3f126637899a4459b72dd3826e0f1a40beca0a57bcf8d6c4947a8b11751af5b9ffe59b66c1ace6914b8c482db6a2a35ab3b8626ed68d8ca0726d5ed61402936e387757380d7aa071dc66fb8ddb8105a32ae70f4f7d9c5fa550e7e85ab27a4a2cebe71904bf6", @generic="72578600a251adc0b1e45e90bd45de9f0885e5f5f612c5c06238983329c3fd8e8c672b78f42f739ea959f400e1d0bddbb32dab326c40828631bc6b534d2ee9f571b53c4816bb91acbef7fe3b3007cfe54ff6658d77bc450a7511f62e3def887d51160596754ca0aa9c2947c116a08575affa986c2c0235289ae082ffb49d5dd01e29b7e0ba98a660427ba8a992361bd0de070ba8941dce5e1856fa47effe74d71bc1de1c04a9e90bc58c2b08061fd0", @generic="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", @generic="0c88d3862d0199e9391c96914119fdb00e39802e89d9f1a3906fa2888e80520379c3e33befc4af7292ca07a4fd33894e3de98c036440"]}, @typed={0xc, 0x60, 0x0, 0x0, @u64=0xfffffffffffffff9}]}, 0x134c}, {&(0x7f00000015c0)={0x208, 0x42, 0x321, 0x70bd2b, 0x25dedbfe, "", [@nested={0x1d5, 0x96, 0x0, 0x1, [@generic="08e3af58fb46bc8c34aecae7665afeccea11b715933399f20d0ff8700aa912c61c7dc4ac5d40c3cb23884d2fe9851a8f605ae75a20fd0e66d888391f14dd41489e69d47a177bd505b5c73be07139d464b14102f35b9b9ac3c4e525578b2913b021b2a6873a80efad7d24ab723cc2c66f2879061682cb546786eb37b77a3599db7655ba861a738d00bc79a2ac31", @typed={0x8, 0x52, 0x0, 0x0, @pid=r3}, @generic="3d80e173f6ee5ecc4945852affaff397eb2c7163fe2ee8581759b417636b296146e019241e9409706fa833bcdd26e03142de4486e32a50da1fa46b4a8ac5db9d56c3cc59d90f9b1bf37f1f2fedab75dadac79236006b44f1b32c271dbf3cfd718a8082677bd71a0578aa6c65a327a37152f23ab3e5f853cec5e7e872e1e834128054aabbdcad7af716631989ed02cd2b595f9252f903e2e99730b5c809a03be8c313cba75a2a9eebd17820cd88d9db1604740078c3e21f", @generic, @typed={0x8, 0x22, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x26, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x3a, 0x0, 0x0, @uid}, @generic="773dfe0d4112c40db289e6cfa6c0f0bd9a31fe21c45c97b1819797ecb800dd09411be34f4a83fdbeca3aec7377dd39bccfcac92bca40b7c6ede00f59fa333675cc8268ed2d824018aba48348524baf4b8e78c326811d5fee4d496d654de8f7b8a7e903b0c7"]}, @typed={0x4, 0x4d}, @generic="331d3ee024a4b8591ed660a7c6ded18ef2d830d3e9d3e122c78d79"]}, 0x208}], 0x2, &(0x7f00000018c0)=[@rights={{0x28, 0x1, 0x1, [r1, r2, r12, r13, r1, r0]}}], 0x28, 0x8000}, 0x40) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) (async, rerun: 64) fcntl$setflags(r1, 0x2, 0x0) (rerun: 64) 21:23:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8946, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 726.982542][T24621] FAULT_INJECTION: forcing a failure. [ 726.982542][T24621] name failslab, interval 1, probability 0, space 0, times 0 [ 726.990737][T24622] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 727.007941][T24622] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 727.010295][T24621] CPU: 0 PID: 24621 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 727.031852][T24621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 727.041909][T24621] Call Trace: [ 727.045212][T24621] dump_stack_lvl+0x1e2/0x24b [ 727.049891][T24621] ? bfq_pos_tree_add_move+0x43e/0x43e [ 727.055348][T24621] ? find_next_bit+0xd6/0x120 [ 727.060020][T24621] dump_stack+0x15/0x17 [ 727.064173][T24621] should_fail+0x3c0/0x510 [ 727.068585][T24621] ? percpu_ref_init+0xd0/0x340 [ 727.073463][T24621] __should_failslab+0x9f/0xe0 [ 727.078218][T24621] should_failslab+0x9/0x20 [ 727.082710][T24621] kmem_cache_alloc_trace+0x3a/0x330 [ 727.088008][T24621] percpu_ref_init+0xd0/0x340 [ 727.092674][T24621] ? blk_cgroup_bio_start+0x310/0x310 [ 727.098061][T24621] blkg_alloc+0xa4/0x5a0 [ 727.102311][T24621] blkcg_init_queue+0x27/0x1d0 [ 727.107152][T24621] blk_alloc_queue+0x49b/0x640 [ 727.111953][T24621] blk_mq_init_queue+0x35/0xc0 [ 727.116723][T24621] loop_add+0x270/0x760 [ 727.120876][T24621] loop_control_ioctl+0x564/0x740 [ 727.125999][T24621] ? loop_remove+0xb0/0xb0 [ 727.130425][T24621] ? __fget_files+0x310/0x370 [ 727.135097][T24621] ? security_file_ioctl+0xb1/0xd0 [ 727.140213][T24621] ? loop_remove+0xb0/0xb0 [ 727.144626][T24621] __se_sys_ioctl+0x115/0x190 [ 727.149299][T24621] __x64_sys_ioctl+0x7b/0x90 [ 727.153885][T24621] do_syscall_64+0x34/0x70 [ 727.158297][T24621] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 727.164196][T24621] RIP: 0033:0x7fb457f980f9 21:23:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:31 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8947, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 727.168603][T24621] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 727.188642][T24621] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.197057][T24621] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 727.205031][T24621] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 727.213170][T24621] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 727.221138][T24621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 727.229117][T24621] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:31 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 23) 21:23:31 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs289PHFUcAPDv7AK1pRVa64/Sqhg1En9AoVV78KBGEw+amOihHhFog90WUzCxDVH0UI/axLvxaOJf4EkvRj2ZeNW7aVINl1ZPa2Z3Bha6iywsbHU+n2Ta92be5r3vvHm7b+YxARTWcPpPErE/In6NiIF6dm2B4fp/N5cXp/5aXpxKolp948+kVu7G8uJUXjT/XH+eWarnjzapd/7S5XOTlcrMxSw/tnD+3bH5S5efmj0/eXbm7MyFiVOnTp4Yf/aZiac7Emca142hD+aOHXnlrauvTZ2++vaPXyd5/Ovi6JDhjQ4+2uHKuu1AQzrp6WJDaEs5ItLu6q2N/4Eox2rnDcTLH3e1ccCOqlar1T8Otjy8VAX+x5LodguA7sh/6NP733zbrbnH7eD6C/UboDTum9lWP9ITpaxM77r7204ajojTS39/kW6xM88hAADW+Dad/zzZbP5Xinsayt2ZraEMRsTBiDgUEXdFxOGIuDuiVvbeiLivzfrXL5LcOv8pXdtSYJuUzv+ey9a21s7/8tlfDJaz3IFa/L3JmdnKzPHsnIxE7540P75BHd+99MunrY41zv/SLa0/nwtm7bjWs2ftZ6YnFya3E3Oj6x9FDPU0iz9ZWQlIIuJIRAxtsY7Zx7861urYv8e/gQ6sM1W/jHis3v9LsS7+XLLx+uTYHVGZOT6WXxW3+unnK6+3qn9b8XdA2v/7ml7/K/EPJo3rtfPt13Hlt09a3tNs9frvS96spfuyfe9PLixcHI/oS17N9j+/un9i9bN5Pi+fxj/ycPPxfyhWz8TRiEgv4vsj4oGIeDBr+0MR0f/ZxvH/8OIj72w9/p2Vxj/dVv+3nyif+/6bNZUOthN/2v8na6mRbM9mvv8228Dtnj8AAAD4LyhFxP5ISqMr6VJpdLT+N/yHY1+pMje/8MSZufcuTNffERiM3lL+pGug4XnoeHZbn+cn1uVPZM+NPy/vreVHp+Yq090OHgquv8X4T/1e7nbrgB3nfS0oLuMfisv4h+Iy/qG4moz/vd1oB7D7mv3+f9iFdgC7z/wfisv4h+Iy/qG4jH8opO281y9R5ESUbotmSOxQotvfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xTwAAAP//1HHn6g==") 21:23:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8948, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 727.255233][T24624] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 727.274078][T24624] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) 21:23:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 727.311936][T24648] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 727.324598][T24648] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 727.372578][T24658] FAULT_INJECTION: forcing a failure. [ 727.372578][T24658] name failslab, interval 1, probability 0, space 0, times 0 [ 727.385243][T24658] CPU: 0 PID: 24658 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 727.396984][T24658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 727.407029][T24658] Call Trace: [ 727.410330][T24658] dump_stack_lvl+0x1e2/0x24b [ 727.415013][T24658] ? bfq_pos_tree_add_move+0x43e/0x43e [ 727.420467][T24658] ? pcpu_memcg_post_alloc_hook+0x1c8/0x340 [ 727.426358][T24658] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 727.433038][T24658] dump_stack+0x15/0x17 [ 727.437192][T24658] should_fail+0x3c0/0x510 [ 727.441597][T24658] ? blk_stat_alloc_callback+0x60/0x210 [ 727.447133][T24658] __should_failslab+0x9f/0xe0 [ 727.451886][T24658] should_failslab+0x9/0x20 [ 727.456381][T24658] kmem_cache_alloc_trace+0x3a/0x330 [ 727.461653][T24658] ? blk_mq_poll_stats_fn+0x130/0x130 [ 727.467033][T24658] blk_stat_alloc_callback+0x60/0x210 [ 727.472409][T24658] ? blk_mq_free_tag_set+0x690/0x690 [ 727.477876][T24658] blk_mq_init_allocated_queue+0x8f/0x1a30 [ 727.483692][T24658] ? blk_set_default_limits+0x17b/0x410 [ 727.489243][T24658] ? blk_alloc_queue+0x574/0x640 [ 727.494177][T24658] blk_mq_init_queue+0x6c/0xc0 [ 727.498926][T24658] loop_add+0x270/0x760 [ 727.503067][T24658] loop_control_ioctl+0x564/0x740 [ 727.508075][T24658] ? loop_remove+0xb0/0xb0 [ 727.512474][T24658] ? __fget_files+0x310/0x370 [ 727.517139][T24658] ? security_file_ioctl+0xb1/0xd0 [ 727.522237][T24658] ? loop_remove+0xb0/0xb0 [ 727.526640][T24658] __se_sys_ioctl+0x115/0x190 [ 727.531301][T24658] __x64_sys_ioctl+0x7b/0x90 [ 727.535877][T24658] do_syscall_64+0x34/0x70 [ 727.540282][T24658] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 727.546159][T24658] RIP: 0033:0x7fb457f980f9 [ 727.550581][T24658] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 727.570173][T24658] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.578577][T24658] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 727.586541][T24658] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 727.594501][T24658] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 727.602462][T24658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 727.610424][T24658] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 727.644213][T24662] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 727.657549][T24662] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) 21:23:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8949, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:31 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 24) 21:23:31 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs271vHEUbAPBn7+zkzddrY8xHnABGgLD4sGMnQAoKQCBRgIQERSiN7UQmlxjFRiKRBYYilBCJHlEi8RdQQYOACokWehQpQm4SqA7t3a59vtwZn332Afv7SZvM7M5p5tnZuZvd8QZQWKPpP0nE4Yj4JSIG6tmNBUbr/91aXZ75Y3V5Jolq9fXfk1q5m6vLM3nR/HOH8sxKPX+sRb2Ll6+cn65U5i5l+YmlC+9MLF6+8uT8helzc+fmLk6dPn3q5OQzT0891ZU407hujry/cPzoy29ee3XmzLW3fvgqyeNviqNLRjc7+EiXK+u1Iw3ppK+HDaEj5YhIu6u/Nv4HohzrnTcQL33U08YBu6parVb3tzk2PJTMVoH/sCR63QKgN/Lf+vT+N9/2bvbRezeer98ApXHfyrb6kb4oZWX6m+5vu2k0Is6s/Pl5usXuPIcAANjgm3T+80Sr+V8p7m4o9/9sDWUwIu6IiKGIuDMihiPiroha2Xsi4t4O629eJLl9/lO6vq3Atiid/z2brW1tnP/ls78YLGe5I7X4+5Oz85W5E9k5GYv+/Wl+cpM6vn3x50/aHWuc/6VbWn8+F8zacb2v6QHd7PTS9E5ibnTjw4iRvlbxJ2srAUlEHI2IkW3WMf/Yl8fbHfv7+DfRhXWm6hcRj9b7fyWa4s8lm69PTvwvKnMnJvKr4nY//nT1tXb17yj+Lkj7/2DL638t/sGkcb12sfM6rv76cdt7mu1e//uSN2rpfdm+96aXli5NRuxLXsn2P7e+f2r9s3k+L5/GP/ZQ6/E/FOtn4lhEpBfxfRFxf0Q8kLX9wYg49Onm8X//wsNvbz/+3ZXGP9tR/3eeKJ//7usNlQ52En/a/6dqqbFsz1a+/7bawJ2ePwAAAPg3KEXE4UhK42vpUml8vP43/MNxsFRZWFx6/OzCuxdn6+8IDEZ/KX/SNdDwPHQyu63P81NN+ZPZc+PPygdq+fGZhcpsr4OHgjvUZvynfiv3unXArvO+FhSX8Q/FZfxDcRn/UFwtxv+BXrQD2Hutfv8/6EE7gL1n/g/FZfxDcRn/UFzGPxTSTt7rlyhyIkr/iGZI7FKi199MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFXAAAA//+8h+b9") 21:23:31 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:31 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f00000000c0)={0xffff, 0x3f, 0x5e}) r2 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=r2], 0x1}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) r3 = gettid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) fstat(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1f3cd45b4043b97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) (async) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = gettid() (async) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) fstat(r8, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(r8, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1fbcd65b404bb97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) (async) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r12) (async) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r13) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001880)=[{&(0x7f0000000240)={0x134c, 0x32, 0x2, 0x70bd27, 0x25dfdbff, "", [@generic="fb32d4ff8a81e5a39154ee53dd1e735ad24a33b71f5b1a37956596a5286053d905fd01b050daa7f29fabe3f6b2721b64d8a0ef9a43b8865cdb0cce9ee862d4c57e645563b12759a906bcbc808e21f618a57b42eee82d1ef86a3347af6d98e8ad20ab6a176d924437f399f94e8b2bce", @nested={0x12bd, 0x5b, 0x0, 0x1, [@typed={0xa8, 0x57, 0x0, 0x0, @binary="fa8777736b17e88b0db78a3a98835cf116de53b33d4ce87348b4e6b55fc5d2bf09d6ad42c9038ffedaefcf0ae10ad7a7e7c1284bd3d94c3331a3143919d08604a5c3719d6c4f14919450b10cfde03f27f602908e2fb3ae4da4119a05a48d862cedec8e72de6117d91bcbdd002693fd7171f4257c4fdee265d94ca3374a683bda2aae881f5f1bf6276d9d55b738f51a5d937f07de91dee5e86666cf928eacd57df7e30369"}, @typed={0x8, 0x8, 0x0, 0x0, @ipv4=@multicast2}, @generic="d15b96eef9d814a97a678ce6ff44adf05ca20cb7ab066727f6ebfbabf4d3b2c55ddd1fdf2c68e22c77afdcdf393a91379f", @generic="b8e7d514616d6fc144ad800606c0abd35477b850486ef6b89873f1f65b63ab6af0cd0b40de61564903a6636fb98ddb90d40ae52aebc87ff22260d3bafcbd86bb95ba93976772c3525929632d62e743916251cec56cd94d56a22873364daa11771da9c5b5e85c016c0ce04b722e9e666e8fc2af172a1a966e3c44093cc9c7a5ed4a0fbf4ce018314fec51fb9b66b3f126637899a4459b72dd3826e0f1a40beca0a57bcf8d6c4947a8b11751af5b9ffe59b66c1ace6914b8c482db6a2a35ab3b8626ed68d8ca0726d5ed61402936e387757380d7aa071dc66fb8ddb8105a32ae70f4f7d9c5fa550e7e85ab27a4a2cebe71904bf6", @generic="72578600a251adc0b1e45e90bd45de9f0885e5f5f612c5c06238983329c3fd8e8c672b78f42f739ea959f400e1d0bddbb32dab326c40828631bc6b534d2ee9f571b53c4816bb91acbef7fe3b3007cfe54ff6658d77bc450a7511f62e3def887d51160596754ca0aa9c2947c116a08575affa986c2c0235289ae082ffb49d5dd01e29b7e0ba98a660427ba8a992361bd0de070ba8941dce5e1856fa47effe74d71bc1de1c04a9e90bc58c2b08061fd0", @generic="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", @generic="0c88d3862d0199e9391c96914119fdb00e39802e89d9f1a3906fa2888e80520379c3e33befc4af7292ca07a4fd33894e3de98c036440"]}, @typed={0xc, 0x60, 0x0, 0x0, @u64=0xfffffffffffffff9}]}, 0x134c}, {&(0x7f00000015c0)={0x208, 0x42, 0x321, 0x70bd2b, 0x25dedbfe, "", [@nested={0x1d5, 0x96, 0x0, 0x1, [@generic="08e3af58fb46bc8c34aecae7665afeccea11b715933399f20d0ff8700aa912c61c7dc4ac5d40c3cb23884d2fe9851a8f605ae75a20fd0e66d888391f14dd41489e69d47a177bd505b5c73be07139d464b14102f35b9b9ac3c4e525578b2913b021b2a6873a80efad7d24ab723cc2c66f2879061682cb546786eb37b77a3599db7655ba861a738d00bc79a2ac31", @typed={0x8, 0x52, 0x0, 0x0, @pid=r3}, @generic="3d80e173f6ee5ecc4945852affaff397eb2c7163fe2ee8581759b417636b296146e019241e9409706fa833bcdd26e03142de4486e32a50da1fa46b4a8ac5db9d56c3cc59d90f9b1bf37f1f2fedab75dadac79236006b44f1b32c271dbf3cfd718a8082677bd71a0578aa6c65a327a37152f23ab3e5f853cec5e7e872e1e834128054aabbdcad7af716631989ed02cd2b595f9252f903e2e99730b5c809a03be8c313cba75a2a9eebd17820cd88d9db1604740078c3e21f", @generic, @typed={0x8, 0x22, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x26, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x3a, 0x0, 0x0, @uid}, @generic="773dfe0d4112c40db289e6cfa6c0f0bd9a31fe21c45c97b1819797ecb800dd09411be34f4a83fdbeca3aec7377dd39bccfcac92bca40b7c6ede00f59fa333675cc8268ed2d824018aba48348524baf4b8e78c326811d5fee4d496d654de8f7b8a7e903b0c7"]}, @typed={0x4, 0x4d}, @generic="331d3ee024a4b8591ed660a7c6ded18ef2d830d3e9d3e122c78d79"]}, 0x208}], 0x2, &(0x7f00000018c0)=[@rights={{0x28, 0x1, 0x1, [r1, r2, r12, r13, r1, r0]}}], 0x28, 0x8000}, 0x40) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) fcntl$setflags(r1, 0x2, 0x0) 21:23:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x894a, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 727.826053][T24667] FAULT_INJECTION: forcing a failure. [ 727.826053][T24667] name failslab, interval 1, probability 0, space 0, times 0 [ 727.848115][T24667] CPU: 0 PID: 24667 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 727.860062][T24667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 727.870306][T24667] Call Trace: 21:23:31 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 727.873613][T24667] dump_stack_lvl+0x1e2/0x24b [ 727.878308][T24667] ? bfq_pos_tree_add_move+0x43e/0x43e [ 727.883792][T24667] dump_stack+0x15/0x17 [ 727.887962][T24667] should_fail+0x3c0/0x510 [ 727.892398][T24667] ? blk_stat_alloc_callback+0x8e/0x210 [ 727.898063][T24667] __should_failslab+0x9f/0xe0 [ 727.902839][T24667] should_failslab+0x9/0x20 [ 727.907357][T24667] __kmalloc+0x60/0x360 [ 727.911523][T24667] ? kmem_cache_alloc_trace+0x1dd/0x330 [ 727.917169][T24667] ? blk_stat_alloc_callback+0x60/0x210 [ 727.922735][T24667] ? blk_mq_poll_stats_fn+0x130/0x130 [ 727.928118][T24667] blk_stat_alloc_callback+0x8e/0x210 [ 727.933633][T24667] ? blk_mq_free_tag_set+0x690/0x690 [ 727.938930][T24667] ? blk_mq_poll_stats_fn+0x130/0x130 [ 727.944330][T24667] blk_mq_init_allocated_queue+0x8f/0x1a30 [ 727.950138][T24667] ? blk_set_default_limits+0x17b/0x410 [ 727.955804][T24667] ? blk_alloc_queue+0x574/0x640 [ 727.960738][T24667] blk_mq_init_queue+0x6c/0xc0 [ 727.965581][T24667] loop_add+0x270/0x760 [ 727.969749][T24667] loop_control_ioctl+0x564/0x740 [ 727.974760][T24667] ? loop_remove+0xb0/0xb0 [ 727.979168][T24667] ? __fget_files+0x310/0x370 [ 727.983936][T24667] ? security_file_ioctl+0xb1/0xd0 [ 727.989040][T24667] ? loop_remove+0xb0/0xb0 [ 727.993444][T24667] __se_sys_ioctl+0x115/0x190 [ 727.998135][T24667] __x64_sys_ioctl+0x7b/0x90 [ 728.002740][T24667] do_syscall_64+0x34/0x70 [ 728.007156][T24667] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 728.013049][T24667] RIP: 0033:0x7fb457f980f9 21:23:31 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 25) [ 728.017457][T24667] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 728.037050][T24667] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 728.045538][T24667] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 728.053498][T24667] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 728.061473][T24667] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 728.069457][T24667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 728.077418][T24667] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 728.110397][T24701] FAULT_INJECTION: forcing a failure. [ 728.110397][T24701] name failslab, interval 1, probability 0, space 0, times 0 [ 728.114884][T24674] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 728.124424][T24701] CPU: 1 PID: 24701 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 728.136897][T24672] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 728.147104][T24701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 728.147110][T24701] Call Trace: [ 728.147128][T24701] dump_stack_lvl+0x1e2/0x24b [ 728.147141][T24701] ? bfq_pos_tree_add_move+0x43e/0x43e [ 728.147162][T24701] dump_stack+0x15/0x17 [ 728.161484][T24674] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 728.169453][T24701] should_fail+0x3c0/0x510 [ 728.169469][T24701] ? blk_mq_init_allocated_queue+0xf8/0x1a30 [ 728.169480][T24701] __should_failslab+0x9f/0xe0 [ 728.169501][T24701] should_failslab+0x9/0x20 [ 728.174052][T24672] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 728.177464][T24701] kmem_cache_alloc_trace+0x3a/0x330 [ 728.177487][T24701] ? blk_stat_alloc_callback+0x19b/0x210 [ 728.241890][T24701] ? blk_mq_free_tag_set+0x690/0x690 [ 728.247163][T24701] ? blk_mq_poll_stats_fn+0x130/0x130 [ 728.252546][T24701] blk_mq_init_allocated_queue+0xf8/0x1a30 [ 728.258354][T24701] ? blk_set_default_limits+0x17b/0x410 [ 728.263909][T24701] ? blk_alloc_queue+0x574/0x640 [ 728.268851][T24701] blk_mq_init_queue+0x6c/0xc0 [ 728.273619][T24701] loop_add+0x270/0x760 [ 728.277798][T24701] loop_control_ioctl+0x564/0x740 [ 728.282823][T24701] ? loop_remove+0xb0/0xb0 [ 728.287237][T24701] ? __fget_files+0x310/0x370 [ 728.291913][T24701] ? security_file_ioctl+0xb1/0xd0 [ 728.297019][T24701] ? loop_remove+0xb0/0xb0 [ 728.301429][T24701] __se_sys_ioctl+0x115/0x190 [ 728.306194][T24701] __x64_sys_ioctl+0x7b/0x90 [ 728.310778][T24701] do_syscall_64+0x34/0x70 [ 728.315196][T24701] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 728.321082][T24701] RIP: 0033:0x7fb457f980f9 21:23:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 728.325497][T24701] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 728.345096][T24701] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 728.353509][T24701] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 728.361479][T24701] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 728.369464][T24701] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 21:23:32 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") [ 728.377440][T24701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 728.385409][T24701] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 728.469554][T24706] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 728.482371][T24706] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) 21:23:32 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 26) 21:23:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8970, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:32 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:32 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:32 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="b74f3a6dd9a01146ee543d66dd38", 0xe}, {&(0x7f00000001c0)="83bac333b2f233806dd47a5ebe3dafcad53585173a7c923798b8776250e7327ed3dbdf0a7b540b8e2c8ee6fd6140", 0x2e}, {&(0x7f0000000240)="b723c4356f2007e11674335591c8b9ea0258dc12c6bcffd4a4714b7fde3e7d90e6faee779d8eec0313fa143f0c8afaa2a5c0c91881ce017ba5250cf5fc185529ce60d31d07d81c820ac96cd8bd3e5c8048b3d4682ceaacfe8f594e1997a04110f4ed72210ef39cee96a6e30e9f3726bf4b4b827f656b8c56a3c5060b56cc7baf72803ff7a33ed2c8fda55de8c7ed0471a7ce3b917c66f6bbac3dc8fc3d4b229cf00cf61888d4937c25d615f5631e628a0f14bc58", 0xb4}, {&(0x7f0000000300)="94da52e11cbf4f770c995faf3fac75af03010f95a00830c701e7b4f17ea5cc6022139ee9d94b5852352958f4df60d567eb737390a62ed8fc43412071124d8380165bcade7faee7e286589145e8f01c4e433c070c62121d546ab3c5f834092f", 0x5f}, {&(0x7f0000000380)="887b2a09045b917f4976dfc54197041001a84421c7c75882e8b55d0bbae991ffabac425ce4e6c2df8ef358c51fbb09564fb3b4c02fac88c2225194f4e63d4111841014285c751149e3304ffacf065dda6f5215d4f09b4c4df0c97de544a5b14dc1615e2b56221d8587b70bcf719bf087f94af36fa54d2b171a004dd0879d87467a084b5d5d88f1a92adcb1792be0a376b8891c11967c044834a56ea232155044f67060ed49a802be6ba9937899eb17c2afa8662c87b40091f68b1960c12c34278ce90c36640a2dae8423390e1edee311e8b615ef7499df1310d95de7acd2d759bd86c7217e999ff75b5f31dac1267c9f9b4e089297", 0xf5}, {&(0x7f0000000480)="9720149ab2933c70d05bd671c96c8fd78d660a7bf783792bd3c0704c38881654b3fc691245ae6c7f6fc0e6f4ec9cfddd992332f04353a20862fb9375dab7c1a1e9094863534c49", 0x47}, {&(0x7f0000000500)="f3b244e363ab8758c1b4fcc854b544daa2dde247786a26f5f60bf9a4abce26ee3153528181473c67660bd247b8ab62006ee825f9c8de4f9f38d9d0ec411693ee460cc4ce1c8cea380725ec09a751b352c68abaded1a57d92089b262a70fdc4d120bd52a671f1bb55b3623e20acf7280510971408f44e41eb0fff05ef8fddc8bafe33a8372680d1ee2f58328929d98474b0f93bd5b2fce9169f9f04d98a20dae5f360111089eb0a2962317b29f7ae6fb2e9", 0xb1}], 0x7) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8971, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 728.943098][T24715] FAULT_INJECTION: forcing a failure. [ 728.943098][T24715] name failslab, interval 1, probability 0, space 0, times 0 [ 728.960624][T24715] CPU: 0 PID: 24715 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 728.972352][T24715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 728.982399][T24715] Call Trace: [ 728.985696][T24715] dump_stack_lvl+0x1e2/0x24b [ 728.990360][T24715] ? panic+0x7d7/0x7d7 [ 728.994417][T24715] ? bfq_pos_tree_add_move+0x43e/0x43e [ 728.999892][T24715] ? pcpu_block_refresh_hint+0x20d/0x350 [ 729.005514][T24715] ? pcpu_block_update_hint_alloc+0x96c/0xd00 [ 729.011573][T24715] dump_stack+0x15/0x17 [ 729.015714][T24715] should_fail+0x3c0/0x510 [ 729.020121][T24715] ? blk_mq_realloc_hw_ctxs+0xca/0x1840 [ 729.025653][T24715] __should_failslab+0x9f/0xe0 [ 729.030403][T24715] should_failslab+0x9/0x20 [ 729.034889][T24715] __kmalloc+0x60/0x360 [ 729.039030][T24715] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 729.045708][T24715] blk_mq_realloc_hw_ctxs+0xca/0x1840 [ 729.051081][T24715] ? pcpu_alloc+0x13e8/0x1420 [ 729.055772][T24715] ? find_next_bit+0xd6/0x120 [ 729.060451][T24715] ? cpumask_next+0x11/0x30 [ 729.064948][T24715] ? blk_mq_sysfs_init+0x1c1/0x200 [ 729.070054][T24715] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 729.075945][T24715] ? blk_set_default_limits+0x17b/0x410 [ 729.081531][T24715] ? blk_alloc_queue+0x574/0x640 [ 729.086500][T24715] blk_mq_init_queue+0x6c/0xc0 [ 729.091281][T24715] loop_add+0x270/0x760 [ 729.095450][T24715] loop_control_ioctl+0x564/0x740 [ 729.100581][T24715] ? loop_remove+0xb0/0xb0 [ 729.104990][T24715] ? __fget_files+0x310/0x370 [ 729.109674][T24715] ? security_file_ioctl+0xb1/0xd0 [ 729.114774][T24715] ? loop_remove+0xb0/0xb0 [ 729.119181][T24715] __se_sys_ioctl+0x115/0x190 [ 729.123865][T24715] __x64_sys_ioctl+0x7b/0x90 [ 729.128614][T24715] do_syscall_64+0x34/0x70 [ 729.133031][T24715] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 729.138916][T24715] RIP: 0033:0x7fb457f980f9 21:23:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:33 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 27) 21:23:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8990, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 729.143332][T24715] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 729.162955][T24715] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 729.171373][T24715] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 729.180389][T24715] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 21:23:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 729.188444][T24715] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 729.196413][T24715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 729.204375][T24715] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8991, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 729.250991][T24731] FAULT_INJECTION: forcing a failure. [ 729.250991][T24731] name failslab, interval 1, probability 0, space 0, times 0 [ 729.265759][T24716] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 729.267422][T24718] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 729.288856][T24716] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 729.294323][T24718] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 729.303931][T24739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 729.325396][T24731] CPU: 0 PID: 24731 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 729.337109][T24731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 729.347329][T24731] Call Trace: [ 729.350635][T24731] dump_stack_lvl+0x1e2/0x24b [ 729.355505][T24731] ? panic+0x7d7/0x7d7 [ 729.359562][T24731] ? bfq_pos_tree_add_move+0x43e/0x43e [ 729.365118][T24731] dump_stack+0x15/0x17 [ 729.369278][T24731] should_fail+0x3c0/0x510 [ 729.373692][T24731] ? blk_mq_realloc_hw_ctxs+0x4bb/0x1840 [ 729.379312][T24731] __should_failslab+0x9f/0xe0 [ 729.384091][T24731] should_failslab+0x9/0x20 [ 729.388597][T24731] __kmalloc+0x60/0x360 [ 729.392740][T24731] ? blk_mq_hw_queue_to_node+0x101/0x120 [ 729.398372][T24731] blk_mq_realloc_hw_ctxs+0x4bb/0x1840 [ 729.403819][T24731] ? cpumask_next+0x11/0x30 [ 729.408312][T24731] ? blk_mq_sysfs_init+0x1c1/0x200 [ 729.413411][T24731] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 729.419294][T24731] ? blk_set_default_limits+0x17b/0x410 [ 729.424826][T24731] ? blk_alloc_queue+0x574/0x640 [ 729.429756][T24731] blk_mq_init_queue+0x6c/0xc0 [ 729.434539][T24731] loop_add+0x270/0x760 [ 729.438692][T24731] loop_control_ioctl+0x564/0x740 [ 729.443722][T24731] ? loop_remove+0xb0/0xb0 [ 729.448126][T24731] ? __fget_files+0x310/0x370 [ 729.452787][T24731] ? security_file_ioctl+0xb1/0xd0 [ 729.457883][T24731] ? loop_remove+0xb0/0xb0 [ 729.462315][T24731] __se_sys_ioctl+0x115/0x190 [ 729.466975][T24731] __x64_sys_ioctl+0x7b/0x90 [ 729.471548][T24731] do_syscall_64+0x34/0x70 [ 729.475966][T24731] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 729.481849][T24731] RIP: 0033:0x7fb457f980f9 21:23:33 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:33 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 729.486268][T24731] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 729.505893][T24731] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 729.514296][T24731] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 729.522252][T24731] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 729.530213][T24731] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 729.538168][T24731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 729.546138][T24731] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 729.632933][T24745] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 729.641116][T24747] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 729.645643][T24745] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 729.657968][T24747] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) 21:23:33 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="b74f3a6dd9a01146ee543d66dd38", 0xe}, {&(0x7f00000001c0)="83bac333b2f233806dd47a5ebe3dafcad53585173a7c923798b8776250e7327ed3dbdf0a7b540b8e2c8ee6fd6140", 0x2e}, {&(0x7f0000000240)="b723c4356f2007e11674335591c8b9ea0258dc12c6bcffd4a4714b7fde3e7d90e6faee779d8eec0313fa143f0c8afaa2a5c0c91881ce017ba5250cf5fc185529ce60d31d07d81c820ac96cd8bd3e5c8048b3d4682ceaacfe8f594e1997a04110f4ed72210ef39cee96a6e30e9f3726bf4b4b827f656b8c56a3c5060b56cc7baf72803ff7a33ed2c8fda55de8c7ed0471a7ce3b917c66f6bbac3dc8fc3d4b229cf00cf61888d4937c25d615f5631e628a0f14bc58", 0xb4}, {&(0x7f0000000300)="94da52e11cbf4f770c995faf3fac75af03010f95a00830c701e7b4f17ea5cc6022139ee9d94b5852352958f4df60d567eb737390a62ed8fc43412071124d8380165bcade7faee7e286589145e8f01c4e433c070c62121d546ab3c5f834092f", 0x5f}, {&(0x7f0000000380)="887b2a09045b917f4976dfc54197041001a84421c7c75882e8b55d0bbae991ffabac425ce4e6c2df8ef358c51fbb09564fb3b4c02fac88c2225194f4e63d4111841014285c751149e3304ffacf065dda6f5215d4f09b4c4df0c97de544a5b14dc1615e2b56221d8587b70bcf719bf087f94af36fa54d2b171a004dd0879d87467a084b5d5d88f1a92adcb1792be0a376b8891c11967c044834a56ea232155044f67060ed49a802be6ba9937899eb17c2afa8662c87b40091f68b1960c12c34278ce90c36640a2dae8423390e1edee311e8b615ef7499df1310d95de7acd2d759bd86c7217e999ff75b5f31dac1267c9f9b4e089297", 0xf5}, {&(0x7f0000000480)="9720149ab2933c70d05bd671c96c8fd78d660a7bf783792bd3c0704c38881654b3fc691245ae6c7f6fc0e6f4ec9cfddd992332f04353a20862fb9375dab7c1a1e9094863534c49", 0x47}, {&(0x7f0000000500)="f3b244e363ab8758c1b4fcc854b544daa2dde247786a26f5f60bf9a4abce26ee3153528181473c67660bd247b8ab62006ee825f9c8de4f9f38d9d0ec411693ee460cc4ce1c8cea380725ec09a751b352c68abaded1a57d92089b262a70fdc4d120bd52a671f1bb55b3623e20acf7280510971408f44e41eb0fff05ef8fddc8bafe33a8372680d1ee2f58328929d98474b0f93bd5b2fce9169f9f04d98a20dae5f360111089eb0a2962317b29f7ae6fb2e9", 0xb1}], 0x7) r2 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async, rerun: 64) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (rerun: 64) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:33 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:33 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 28) 21:23:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8992, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:33 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) 21:23:33 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @loopback, @empty}}) 21:23:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8993, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @empty}}) 21:23:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @loopback, @empty}}) 21:23:34 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @loopback, @empty}}) [ 730.069534][T24759] FAULT_INJECTION: forcing a failure. [ 730.069534][T24759] name failslab, interval 1, probability 0, space 0, times 0 [ 730.082959][T24759] CPU: 1 PID: 24759 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 730.094691][T24759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 730.105973][T24759] Call Trace: [ 730.109285][T24759] dump_stack_lvl+0x1e2/0x24b [ 730.113972][T24759] ? panic+0x7d7/0x7d7 [ 730.118049][T24759] ? bfq_pos_tree_add_move+0x43e/0x43e [ 730.123538][T24759] dump_stack+0x15/0x17 [ 730.127860][T24759] should_fail+0x3c0/0x510 [ 730.132292][T24759] ? blk_mq_realloc_hw_ctxs+0x802/0x1840 [ 730.138034][T24759] __should_failslab+0x9f/0xe0 [ 730.142809][T24759] should_failslab+0x9/0x20 [ 730.147468][T24759] __kmalloc+0x60/0x360 [ 730.151643][T24759] ? blk_mq_realloc_hw_ctxs+0x4bb/0x1840 [ 730.157285][T24759] blk_mq_realloc_hw_ctxs+0x802/0x1840 [ 730.162750][T24759] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 730.168650][T24759] ? blk_set_default_limits+0x17b/0x410 [ 730.174187][T24759] ? blk_alloc_queue+0x574/0x640 [ 730.179115][T24759] blk_mq_init_queue+0x6c/0xc0 [ 730.183879][T24759] loop_add+0x270/0x760 [ 730.188020][T24759] loop_control_ioctl+0x564/0x740 [ 730.193047][T24759] ? loop_remove+0xb0/0xb0 [ 730.197450][T24759] ? __fget_files+0x310/0x370 [ 730.202288][T24759] ? security_file_ioctl+0xb1/0xd0 [ 730.207387][T24759] ? loop_remove+0xb0/0xb0 [ 730.211806][T24759] __se_sys_ioctl+0x115/0x190 [ 730.216492][T24759] __x64_sys_ioctl+0x7b/0x90 [ 730.221129][T24759] do_syscall_64+0x34/0x70 [ 730.225554][T24759] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 730.231432][T24759] RIP: 0033:0x7fb457f980f9 [ 730.235840][T24759] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 730.255590][T24759] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 730.264006][T24759] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 730.272001][T24759] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 730.279968][T24759] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 730.287936][T24759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 730.295917][T24759] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 730.331241][T24758] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 730.331934][T24761] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 730.343796][T24758] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 730.369710][T24774] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 730.372434][T24761] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) 21:23:35 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="b74f3a6dd9a01146ee543d66dd38", 0xe}, {&(0x7f00000001c0)="83bac333b2f233806dd47a5ebe3dafcad53585173a7c923798b8776250e7327ed3dbdf0a7b540b8e2c8ee6fd6140", 0x2e}, {&(0x7f0000000240)="b723c4356f2007e11674335591c8b9ea0258dc12c6bcffd4a4714b7fde3e7d90e6faee779d8eec0313fa143f0c8afaa2a5c0c91881ce017ba5250cf5fc185529ce60d31d07d81c820ac96cd8bd3e5c8048b3d4682ceaacfe8f594e1997a04110f4ed72210ef39cee96a6e30e9f3726bf4b4b827f656b8c56a3c5060b56cc7baf72803ff7a33ed2c8fda55de8c7ed0471a7ce3b917c66f6bbac3dc8fc3d4b229cf00cf61888d4937c25d615f5631e628a0f14bc58", 0xb4}, {&(0x7f0000000300)="94da52e11cbf4f770c995faf3fac75af03010f95a00830c701e7b4f17ea5cc6022139ee9d94b5852352958f4df60d567eb737390a62ed8fc43412071124d8380165bcade7faee7e286589145e8f01c4e433c070c62121d546ab3c5f834092f", 0x5f}, {&(0x7f0000000380)="887b2a09045b917f4976dfc54197041001a84421c7c75882e8b55d0bbae991ffabac425ce4e6c2df8ef358c51fbb09564fb3b4c02fac88c2225194f4e63d4111841014285c751149e3304ffacf065dda6f5215d4f09b4c4df0c97de544a5b14dc1615e2b56221d8587b70bcf719bf087f94af36fa54d2b171a004dd0879d87467a084b5d5d88f1a92adcb1792be0a376b8891c11967c044834a56ea232155044f67060ed49a802be6ba9937899eb17c2afa8662c87b40091f68b1960c12c34278ce90c36640a2dae8423390e1edee311e8b615ef7499df1310d95de7acd2d759bd86c7217e999ff75b5f31dac1267c9f9b4e089297", 0xf5}, {&(0x7f0000000480)="9720149ab2933c70d05bd671c96c8fd78d660a7bf783792bd3c0704c38881654b3fc691245ae6c7f6fc0e6f4ec9cfddd992332f04353a20862fb9375dab7c1a1e9094863534c49", 0x47}, {&(0x7f0000000500)="f3b244e363ab8758c1b4fcc854b544daa2dde247786a26f5f60bf9a4abce26ee3153528181473c67660bd247b8ab62006ee825f9c8de4f9f38d9d0ec411693ee460cc4ce1c8cea380725ec09a751b352c68abaded1a57d92089b262a70fdc4d120bd52a671f1bb55b3623e20acf7280510971408f44e41eb0fff05ef8fddc8bafe33a8372680d1ee2f58328929d98474b0f93bd5b2fce9169f9f04d98a20dae5f360111089eb0a2962317b29f7ae6fb2e9", 0xb1}], 0x7) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, @loopback, @empty}}) 21:23:35 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 29) 21:23:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8994, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:35 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:35 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x8995, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, @loopback, @empty}}) 21:23:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89a2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 731.173149][T24792] FAULT_INJECTION: forcing a failure. [ 731.173149][T24792] name failslab, interval 1, probability 0, space 0, times 0 [ 731.188426][T24792] CPU: 0 PID: 24792 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 731.189556][T24791] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 731.200170][T24792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 731.200176][T24792] Call Trace: [ 731.200195][T24792] dump_stack_lvl+0x1e2/0x24b [ 731.200206][T24792] ? panic+0x7d7/0x7d7 [ 731.200218][T24792] ? bfq_pos_tree_add_move+0x43e/0x43e [ 731.200230][T24792] dump_stack+0x15/0x17 [ 731.200242][T24792] should_fail+0x3c0/0x510 [ 731.200254][T24792] ? sbitmap_init_node+0x148/0x3d0 [ 731.200267][T24792] __should_failslab+0x9f/0xe0 [ 731.200281][T24792] should_failslab+0x9/0x20 [ 731.200292][T24792] __kmalloc+0x60/0x360 [ 731.200306][T24792] sbitmap_init_node+0x148/0x3d0 [ 731.200319][T24792] blk_mq_realloc_hw_ctxs+0x896/0x1840 [ 731.200342][T24792] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 731.213312][T24791] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 731.222682][T24792] ? blk_set_default_limits+0x17b/0x410 [ 731.222699][T24792] ? blk_alloc_queue+0x574/0x640 [ 731.222714][T24792] blk_mq_init_queue+0x6c/0xc0 [ 731.222729][T24792] loop_add+0x270/0x760 [ 731.222757][T24792] loop_control_ioctl+0x564/0x740 [ 731.320140][T24792] ? loop_remove+0xb0/0xb0 [ 731.324819][T24792] ? __fget_files+0x310/0x370 [ 731.329504][T24792] ? security_file_ioctl+0xb1/0xd0 [ 731.334622][T24792] ? loop_remove+0xb0/0xb0 [ 731.339145][T24792] __se_sys_ioctl+0x115/0x190 [ 731.343820][T24792] __x64_sys_ioctl+0x7b/0x90 [ 731.348404][T24792] do_syscall_64+0x34/0x70 [ 731.352815][T24792] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 731.358697][T24792] RIP: 0033:0x7fb457f980f9 21:23:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, @loopback, @empty}}) 21:23:35 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 30) 21:23:35 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, @loopback, @empty}}) [ 731.363119][T24792] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 731.382713][T24792] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.391118][T24792] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 731.399093][T24792] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 731.407055][T24792] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 731.415013][T24792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 731.422972][T24792] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 731.482917][T24813] FAULT_INJECTION: forcing a failure. [ 731.482917][T24813] name failslab, interval 1, probability 0, space 0, times 0 [ 731.486978][T24790] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 731.495699][T24813] CPU: 0 PID: 24813 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 731.508610][T24790] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 731.519512][T24813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 731.519518][T24813] Call Trace: [ 731.519538][T24813] dump_stack_lvl+0x1e2/0x24b [ 731.519550][T24813] ? bfq_pos_tree_add_move+0x43e/0x43e [ 731.519574][T24813] dump_stack+0x15/0x17 [ 731.559232][T24813] should_fail+0x3c0/0x510 [ 731.563645][T24813] ? blk_alloc_flush_queue+0x7a/0x250 [ 731.569004][T24813] __should_failslab+0x9f/0xe0 [ 731.573758][T24813] should_failslab+0x9/0x20 [ 731.578248][T24813] kmem_cache_alloc_trace+0x3a/0x330 [ 731.583522][T24813] blk_alloc_flush_queue+0x7a/0x250 [ 731.588725][T24813] blk_mq_realloc_hw_ctxs+0xa81/0x1840 [ 731.594174][T24813] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 731.600067][T24813] ? blk_set_default_limits+0x17b/0x410 [ 731.605604][T24813] ? blk_alloc_queue+0x574/0x640 [ 731.610531][T24813] blk_mq_init_queue+0x6c/0xc0 [ 731.615317][T24813] loop_add+0x270/0x760 [ 731.619461][T24813] loop_control_ioctl+0x564/0x740 [ 731.624471][T24813] ? loop_remove+0xb0/0xb0 [ 731.628890][T24813] ? __fget_files+0x310/0x370 [ 731.633564][T24813] ? security_file_ioctl+0xb1/0xd0 [ 731.638662][T24813] ? loop_remove+0xb0/0xb0 [ 731.643066][T24813] __se_sys_ioctl+0x115/0x190 [ 731.647732][T24813] __x64_sys_ioctl+0x7b/0x90 [ 731.652309][T24813] do_syscall_64+0x34/0x70 [ 731.656821][T24813] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 731.662705][T24813] RIP: 0033:0x7fb457f980f9 [ 731.667131][T24813] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 731.686722][T24813] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.695129][T24813] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 731.703092][T24813] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 731.711052][T24813] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 731.719016][T24813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 731.726975][T24813] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:36 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) openat$cgroup_ro(r3, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r4, 0x0, 0x84ffe0, 0x0) 21:23:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89a3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, @loopback, @empty}}) 21:23:36 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:36 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 31) 21:23:36 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89b0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, @loopback, @empty}}) 21:23:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, @loopback, @empty}}) 21:23:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, @loopback, @empty}}) 21:23:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, @loopback, @empty}}) 21:23:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, @loopback, @empty}}) [ 732.296905][T24819] FAULT_INJECTION: forcing a failure. [ 732.296905][T24819] name failslab, interval 1, probability 0, space 0, times 0 [ 732.314467][T24819] CPU: 0 PID: 24819 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 732.326213][T24819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 732.336332][T24819] Call Trace: [ 732.339644][T24819] dump_stack_lvl+0x1e2/0x24b [ 732.344360][T24819] ? bfq_pos_tree_add_move+0x43e/0x43e [ 732.349924][T24819] dump_stack+0x15/0x17 [ 732.354098][T24819] should_fail+0x3c0/0x510 [ 732.358535][T24819] ? blk_alloc_flush_queue+0xe0/0x250 [ 732.363930][T24819] __should_failslab+0x9f/0xe0 [ 732.368716][T24819] should_failslab+0x9/0x20 [ 732.373236][T24819] __kmalloc+0x60/0x360 [ 732.377411][T24819] ? kmem_cache_alloc_trace+0x1dd/0x330 [ 732.382976][T24819] ? blk_alloc_flush_queue+0x7a/0x250 [ 732.388363][T24819] blk_alloc_flush_queue+0xe0/0x250 [ 732.390967][T24832] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 732.393573][T24819] blk_mq_realloc_hw_ctxs+0xa81/0x1840 [ 732.393591][T24819] blk_mq_init_allocated_queue+0x41a/0x1a30 [ 732.393605][T24819] ? blk_set_default_limits+0x17b/0x410 [ 732.393629][T24819] ? blk_alloc_queue+0x574/0x640 [ 732.424654][T24819] blk_mq_init_queue+0x6c/0xc0 [ 732.429441][T24819] loop_add+0x270/0x760 [ 732.433595][T24819] loop_control_ioctl+0x564/0x740 [ 732.438610][T24819] ? loop_remove+0xb0/0xb0 [ 732.443049][T24819] ? __fget_files+0x310/0x370 [ 732.447721][T24819] ? security_file_ioctl+0xb1/0xd0 [ 732.452824][T24819] ? loop_remove+0xb0/0xb0 [ 732.457229][T24819] __se_sys_ioctl+0x115/0x190 [ 732.461897][T24819] __x64_sys_ioctl+0x7b/0x90 [ 732.466487][T24819] do_syscall_64+0x34/0x70 [ 732.470915][T24819] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 732.476794][T24819] RIP: 0033:0x7fb457f980f9 [ 732.481205][T24819] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 732.500796][T24819] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 732.509299][T24819] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 732.517264][T24819] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 732.525232][T24819] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 732.533207][T24819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 732.541170][T24819] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 732.563237][T24825] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 732.576890][T24825] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 732.588878][T24820] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 732.601639][T24820] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) 21:23:37 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 32) 21:23:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, @loopback, @empty}}) 21:23:37 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async, rerun: 64) openat$cgroup_ro(r3, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async, rerun: 32) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async, rerun: 32) splice(r0, 0x0, r4, 0x0, 0x84ffe0, 0x0) 21:23:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89b1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:37 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:37 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") [ 733.150449][T24850] FAULT_INJECTION: forcing a failure. [ 733.150449][T24850] name failslab, interval 1, probability 0, space 0, times 0 [ 733.163929][T24850] CPU: 0 PID: 24850 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 733.175658][T24850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 733.185729][T24850] Call Trace: [ 733.189016][T24850] dump_stack_lvl+0x1e2/0x24b [ 733.193686][T24850] ? panic+0x7d7/0x7d7 [ 733.197745][T24850] ? bfq_pos_tree_add_move+0x43e/0x43e [ 733.203284][T24850] dump_stack+0x15/0x17 [ 733.207433][T24850] should_fail+0x3c0/0x510 [ 733.211841][T24850] ? __alloc_disk_node+0x75/0x330 [ 733.216852][T24850] __should_failslab+0x9f/0xe0 [ 733.221623][T24850] should_failslab+0x9/0x20 [ 733.226132][T24850] kmem_cache_alloc_trace+0x3a/0x330 [ 733.231426][T24850] __alloc_disk_node+0x75/0x330 [ 733.236273][T24850] loop_add+0x341/0x760 [ 733.240428][T24850] loop_control_ioctl+0x564/0x740 [ 733.245449][T24850] ? loop_remove+0xb0/0xb0 [ 733.249859][T24850] ? __fget_files+0x310/0x370 [ 733.254651][T24850] ? security_file_ioctl+0xb1/0xd0 [ 733.259762][T24850] ? loop_remove+0xb0/0xb0 [ 733.264176][T24850] __se_sys_ioctl+0x115/0x190 [ 733.268849][T24850] __x64_sys_ioctl+0x7b/0x90 [ 733.273430][T24850] do_syscall_64+0x34/0x70 [ 733.277841][T24850] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 733.283722][T24850] RIP: 0033:0x7fb457f980f9 [ 733.288143][T24850] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 733.307753][T24850] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 733.316166][T24850] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 733.324145][T24850] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 733.332106][T24850] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 733.340086][T24850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 21:23:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, @loopback, @empty}}) 21:23:37 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 33) 21:23:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 733.348046][T24850] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 733.381438][T24863] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 733.399876][T24847] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 733.412007][T24868] FAULT_INJECTION: forcing a failure. [ 733.412007][T24868] name failslab, interval 1, probability 0, space 0, times 0 21:23:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f2, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @empty}}) [ 733.419172][T24847] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 733.439996][T24868] CPU: 0 PID: 24868 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 733.442238][T24852] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 733.451731][T24868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 733.468944][T24852] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 733.474000][T24868] Call Trace: [ 733.474021][T24868] dump_stack_lvl+0x1e2/0x24b [ 733.474034][T24868] ? bfq_pos_tree_add_move+0x43e/0x43e [ 733.474059][T24868] ? preempt_schedule+0xd9/0xe0 [ 733.504419][T24868] ? pcpu_memcg_post_alloc_hook+0x1c8/0x340 [ 733.510309][T24868] dump_stack+0x15/0x17 [ 733.514467][T24868] should_fail+0x3c0/0x510 [ 733.518884][T24868] ? disk_expand_part_tbl+0x1b9/0x3f0 [ 733.524249][T24868] __should_failslab+0x9f/0xe0 [ 733.529009][T24868] should_failslab+0x9/0x20 [ 733.533506][T24868] __kmalloc+0x60/0x360 [ 733.537666][T24868] disk_expand_part_tbl+0x1b9/0x3f0 [ 733.542863][T24868] __alloc_disk_node+0x112/0x330 [ 733.547805][T24868] loop_add+0x341/0x760 [ 733.551965][T24868] loop_control_ioctl+0x564/0x740 [ 733.556987][T24868] ? loop_remove+0xb0/0xb0 [ 733.561398][T24868] ? __fget_files+0x310/0x370 [ 733.566074][T24868] ? security_file_ioctl+0xb1/0xd0 [ 733.571181][T24868] ? loop_remove+0xb0/0xb0 [ 733.575593][T24868] __se_sys_ioctl+0x115/0x190 [ 733.580269][T24868] __x64_sys_ioctl+0x7b/0x90 [ 733.584852][T24868] do_syscall_64+0x34/0x70 [ 733.589264][T24868] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 733.595157][T24868] RIP: 0033:0x7fb457f980f9 [ 733.599570][T24868] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 733.619259][T24868] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:23:37 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @loopback, @empty}}) [ 733.627694][T24868] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 733.635673][T24868] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 733.643639][T24868] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 733.651605][T24868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 733.659573][T24868] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:38 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) (async) openat$cgroup_ro(r3, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r4, 0x0, 0x84ffe0, 0x0) 21:23:38 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 34) 21:23:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @loopback, @empty}}) 21:23:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x40049409, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:38 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:38 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs28tvG0UYAPBv7bilLxJKefQBBAEi4pE0aYEeOAACiQNISHAox5CkVajboCZItIogcChHqMQdcUTiL+AEFwSckLjCHVWqUC4tnIzW3k0c1w5x4sSF/f2kbWd2x5r5dnbs2Z1sAIU1nP6TROyPiN8iYrCRXVtguPHfzeXFqb+WF6eSqNXe/DOpl7uxvDiVF80/ty/PLDXyR9vUO3/p8rnJanXmYpYfWzj/3tj8pctPz56fPDtzdubCxKlTJ0+MP/fsxDM9iTON68aRD+eOHX717auvT52++s5P3yR5/C1x9Mjwegcf63Fl/XagKZ0M9LEhdKUcEWl3VerjfzDKsdp5g/HKJ31tHLCtarVabXfnw5Ua8D+WRL9bAPRH/kOf3v/m2w5NPW4L119s3AClcd/MtsaRgShlZSot97e9NBwRp5f+/jLdYnueQwAArPFdOv95qt38rxT3NpW7M1tDGYqIuyLiYETcHRGHIuKeiHrZ+yLi/i7rb10kuXX+U7q2qcA2KJ3/PZ+tba2d/+WzvxgqZ7kD9fgryZnZ6szx7JyMRGV3mh9fp47vX/71s07Hmud/6ZbWn88Fs3ZcG2h5QDc9uTC5lZibXf844shAu/iTlZWAJCIOR8SRTdYx+8TXxzod+/f419GDdabaVxGPN/p/KVrizyXrr0+O3RHVmeNj+VVxq59/ufJGp/q3FH8PpP2/t+31vxL/UNK8XjvffR1Xfv+04z3NZq//Xclb9fSubN8HkwsLF8cjdiWvZftfWN0/sfrZPJ+XT+MfeaT9+D8Yq2fiaESkF/EDEfFgRDyUtf3hiNj3+frx//jSo+9uPv7tlcY/3VX/d58on/vh2zWVDnUTf9r/J+upkWzPRr7/NtrArZ4/AAAA+C8oRcT+SEqjK+lSaXS08Tf8h2JvqTo3v/Dkmbn3L0w33hEYikopf9I12PQ8dDy7rc/zEy35E9lz4y/Ke+r50am56nS/g4eC29dh/Kf+KPe7dcC2874WFJfxD8Vl/ENxGf9QXG3G/55+tAPYee1+/z/qQzuAnWf+D8Vl/ENxGf9QXMY/FNJW3uuXKHIiSrdFMyS2KdHvbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+CcAAP//9VLmdw==") [ 734.221951][T24880] FAULT_INJECTION: forcing a failure. [ 734.221951][T24880] name failslab, interval 1, probability 0, space 0, times 0 [ 734.238490][T24880] CPU: 1 PID: 24880 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 734.250271][T24880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 734.260317][T24880] Call Trace: [ 734.263600][T24880] dump_stack_lvl+0x1e2/0x24b [ 734.268259][T24880] ? panic+0x7d7/0x7d7 [ 734.272326][T24880] ? bfq_pos_tree_add_move+0x43e/0x43e [ 734.277831][T24880] ? find_next_bit+0xd6/0x120 [ 734.282496][T24880] ? cpumask_next+0x11/0x30 [ 734.287020][T24880] dump_stack+0x15/0x17 [ 734.291183][T24880] should_fail+0x3c0/0x510 [ 734.295596][T24880] ? percpu_ref_init+0xd0/0x340 [ 734.300455][T24880] __should_failslab+0x9f/0xe0 [ 734.305214][T24880] should_failslab+0x9/0x20 [ 734.309704][T24880] kmem_cache_alloc_trace+0x3a/0x330 [ 734.314985][T24880] percpu_ref_init+0xd0/0x340 [ 734.319646][T24880] ? hd_ref_init+0x50/0x50 [ 734.324062][T24880] hd_ref_init+0x27/0x50 [ 734.328402][T24880] __alloc_disk_node+0x1be/0x330 [ 734.333421][T24880] loop_add+0x341/0x760 [ 734.337589][T24880] loop_control_ioctl+0x564/0x740 [ 734.342601][T24880] ? loop_remove+0xb0/0xb0 [ 734.347005][T24880] ? __fget_files+0x310/0x370 [ 734.351667][T24880] ? security_file_ioctl+0xb1/0xd0 [ 734.356764][T24880] ? loop_remove+0xb0/0xb0 [ 734.361167][T24880] __se_sys_ioctl+0x115/0x190 [ 734.365847][T24880] __x64_sys_ioctl+0x7b/0x90 [ 734.370437][T24880] do_syscall_64+0x34/0x70 [ 734.374838][T24880] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 734.380712][T24880] RIP: 0033:0x7fb457f980f9 [ 734.385120][T24880] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 734.404719][T24880] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 734.413118][T24880] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 21:23:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @loopback, @empty}}) 21:23:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x40086602, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:38 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 35) 21:23:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x40087602, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @empty}}) [ 734.421077][T24880] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 734.429036][T24880] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 734.437013][T24880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 734.444975][T24880] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:38 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r4 = dup(r3) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = creat(&(0x7f0000000200)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000020000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000280)="75f30fc734660f070f01cbba200066ed0f38f6bcbffa2e0f63f6f3e10f650f01c80fd3c1", 0x24}], 0x1, 0x4, &(0x7f0000000300), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x5000}) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x0, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r8 = dup(r7) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x0, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) dup2(r3, r3) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r10, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffffffffffe}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000000f00)={0x0, 0x0, @ioapic}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) [ 734.499010][T24903] FAULT_INJECTION: forcing a failure. [ 734.499010][T24903] name failslab, interval 1, probability 0, space 0, times 0 [ 734.513257][T24884] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 734.524738][T24903] CPU: 1 PID: 24903 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 734.530153][T24886] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 734.537306][T24903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 734.537312][T24903] Call Trace: [ 734.537331][T24903] dump_stack_lvl+0x1e2/0x24b [ 734.537343][T24903] ? bfq_pos_tree_add_move+0x43e/0x43e [ 734.537363][T24903] dump_stack+0x15/0x17 [ 734.558014][T24884] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 734.559651][T24903] should_fail+0x3c0/0x510 [ 734.559665][T24903] ? rand_initialize_disk+0x4f/0xa8 [ 734.559686][T24903] __should_failslab+0x9f/0xe0 [ 734.603757][T24903] should_failslab+0x9/0x20 [ 734.608250][T24903] kmem_cache_alloc_trace+0x3a/0x330 [ 734.613527][T24903] ? __kasan_check_write+0x14/0x20 [ 734.618631][T24903] ? percpu_ref_init+0x237/0x340 [ 734.623556][T24903] ? hd_ref_init+0x50/0x50 [ 734.627965][T24903] rand_initialize_disk+0x4f/0xa8 [ 734.632977][T24903] __alloc_disk_node+0x29a/0x330 [ 734.637904][T24903] loop_add+0x341/0x760 [ 734.642051][T24903] loop_control_ioctl+0x564/0x740 [ 734.647065][T24903] ? loop_remove+0xb0/0xb0 [ 734.651587][T24903] ? __fget_files+0x310/0x370 [ 734.656252][T24903] ? security_file_ioctl+0xb1/0xd0 [ 734.661353][T24903] ? loop_remove+0xb0/0xb0 [ 734.665779][T24903] __se_sys_ioctl+0x115/0x190 [ 734.670443][T24903] __x64_sys_ioctl+0x7b/0x90 [ 734.675034][T24903] do_syscall_64+0x34/0x70 [ 734.679440][T24903] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 734.685321][T24903] RIP: 0033:0x7fb457f980f9 [ 734.689728][T24903] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 734.709606][T24903] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 734.718028][T24903] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 734.725991][T24903] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 734.733955][T24903] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 734.741917][T24903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 21:23:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @loopback, @empty}}) 21:23:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @loopback, @empty}}) [ 734.749877][T24903] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 734.759576][T24908] x_tables: duplicate underflow at hook 1 [ 734.767409][T24886] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 734.774106][T24907] x_tables: duplicate underflow at hook 1 21:23:38 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 36) 21:23:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x4020940d, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @loopback, @empty}}) [ 734.803585][T24907] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns 21:23:38 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs289vFFUcAPDv7LYgFGxF/EFBrVFj44+WFlQOHtRo4kETEz3gsbaFVBZqaE2ENFo94FFJvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2Zdrvs1m677aLz+SQD7828zXvfefN238zrBFBYI+k/ScSBiPgtIgbr2fUFRur/3VxZmv5rZWk6iWr1zT+TWrkbK0vTedH8cwN5ZrmeP9qi3oVLl89NVSqzF7P8+OL598YXLl1+eu781NnZs7MXJk+dOnli4rlnJ5/pSpxpXDeGP5w/duTVt6++Pn366js/fZPk8TfF0SUjGx18rMuV9drBhnTS18OG0JFyRKTd1V8b/4NRjrXOG4xXPulp44AdVa1Wq3vbH16uAv9jSfS6BcDuG2j4oU/vf/NtN+Ydt4vrL9ZvgNK4b2Zb/UhflLIy/U33t900EhGnl//+Mt1iZ55DAACs8106/3mq1fyvFPc2lLszW0MZioi7IuJQRNwdEYcj4p6IWtn7IuL+DutvXiS5df5TuralwDYpnf89n61trZ//5bO/GCpnuYO1+PuTM3OV2ePZORmN/r1pfmKDOr5/+dfP2h1rnP+lW1p/PhfM2nGtr+kB3czU4tR2Ym50/eOI4b5W8SerKwFJRByJiOEt1jH3xNfH2h379/g30IV1pupXEY/X+385muLPJRuvT47fEZXZ4+P5VXGrn3+58ka7+rcVfxek/b+/5fW/Gv9Q0rheu9B5HVd+/7TtPc1Wr/89yVu19J5s3wdTi4sXJyL2JK9l+19Y2z+59tk8n5dP4x99pPX4PxRrZ+JoRKQX8QMR8WBEPJS1/eGIGPh84/h/fOnRd7ce/85K45/pqP87T5TP/fDtukqHOok/7f+TtdRotmcz33+bbeB2zx8AAAD8F5Qi4kAkpbHVdKk0Nlb/G/7Dsb9UmV9YfPLM/PsXZurvCAxFfyl/0jXY8Dx0Irutz/OTTfkT2XPjL8r7avmx6fnKTK+Dh4IbaDP+U3+Ue906YMd5XwuKy/iH4jL+obiMfyiuFuN/Xy/aAey+Vr//H/WgHcDuM/+H4jL+obiMfygu4x8KaTvv9UsUORGl26IZEjuU6PU3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHf8EwAA//8hQuMB") 21:23:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @loopback, @empty}}) 21:23:38 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x80086601, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @loopback, @empty}}) [ 734.903811][T24924] FAULT_INJECTION: forcing a failure. [ 734.903811][T24924] name failslab, interval 1, probability 0, space 0, times 0 [ 734.921509][T24924] CPU: 0 PID: 24924 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 734.933553][T24924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 734.943613][T24924] Call Trace: [ 734.946997][T24924] dump_stack_lvl+0x1e2/0x24b [ 734.951665][T24924] ? panic+0x7d7/0x7d7 [ 734.955719][T24924] ? bfq_pos_tree_add_move+0x43e/0x43e [ 734.961170][T24924] ? memset+0x35/0x40 [ 734.965140][T24924] dump_stack+0x15/0x17 [ 734.969286][T24924] should_fail+0x3c0/0x510 [ 734.973701][T24924] ? device_create+0x11d/0x2e0 [ 734.978481][T24924] __should_failslab+0x9f/0xe0 [ 734.983246][T24924] should_failslab+0x9/0x20 [ 734.987740][T24924] kmem_cache_alloc_trace+0x3a/0x330 [ 734.993025][T24924] ? vsnprintf+0x1fa/0x1cd0 [ 734.997517][T24924] device_create+0x11d/0x2e0 [ 735.002112][T24924] ? root_device_unregister+0x80/0x80 [ 735.007474][T24924] ? number+0xd9b/0x1040 [ 735.011704][T24924] bdi_register_va+0x94/0x600 [ 735.016369][T24924] bdi_register+0xd1/0x120 [ 735.020792][T24924] ? __device_add_disk+0x536/0x11d0 [ 735.025977][T24924] ? bdi_register_va+0x600/0x600 [ 735.030903][T24924] ? vsnprintf+0x1bfd/0x1cd0 [ 735.035482][T24924] ? __kasan_check_read+0x11/0x20 [ 735.040511][T24924] ? blk_alloc_devt+0xd4/0x320 [ 735.045263][T24924] __device_add_disk+0x5cb/0x11d0 [ 735.050274][T24924] ? device_add_disk+0x40/0x40 [ 735.055026][T24924] ? loop_add+0x400/0x760 [ 735.059355][T24924] ? vsprintf+0x40/0x40 [ 735.063511][T24924] device_add_disk+0x2a/0x40 [ 735.068188][T24924] loop_add+0x58f/0x760 [ 735.072336][T24924] loop_control_ioctl+0x564/0x740 [ 735.077348][T24924] ? loop_remove+0xb0/0xb0 [ 735.081755][T24924] ? __fget_files+0x310/0x370 [ 735.086432][T24924] ? security_file_ioctl+0xb1/0xd0 [ 735.091532][T24924] ? loop_remove+0xb0/0xb0 [ 735.095936][T24924] __se_sys_ioctl+0x115/0x190 [ 735.100600][T24924] __x64_sys_ioctl+0x7b/0x90 [ 735.105175][T24924] do_syscall_64+0x34/0x70 [ 735.109579][T24924] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 735.115462][T24924] RIP: 0033:0x7fb457f980f9 [ 735.119890][T24924] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 735.139577][T24924] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:23:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @loopback, @empty}}) [ 735.147991][T24924] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 735.155955][T24924] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 735.163915][T24924] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 735.171979][T24924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 735.179948][T24924] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 735.190912][T24924] ------------[ cut here ]------------ [ 735.196562][T24924] WARNING: CPU: 1 PID: 24924 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 735.206194][T24924] Modules linked in: [ 735.210195][T24924] CPU: 1 PID: 24924 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 735.222465][T24924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 735.232935][T24924] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 735.238954][T24924] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 735.258658][T24924] RSP: 0018:ffffc90009e2fbc0 EFLAGS: 00010283 [ 735.264812][T24924] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 735.273006][T24924] RDX: ffffc9000153d000 RSI: 000000000001ffa3 RDI: 000000000001ffa4 [ 735.281047][T24924] RBP: ffffc90009e2fd08 R08: ffffffff82412a76 R09: fffffbfff0c859bf [ 735.289099][T24924] R10: fffffbfff0c859bf R11: 1ffffffff0c859be R12: 0000000000000007 [ 735.297108][T24924] R13: ffff888119f42000 R14: ffff888119f41338 R15: ffff888119f41000 [ 735.305135][T24924] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 735.314098][T24924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 735.320720][T24924] CR2: 0000000020000540 CR3: 000000010f5ff000 CR4: 00000000003526a0 [ 735.328758][T24924] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 735.336775][T24924] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 735.344771][T24924] Call Trace: [ 735.348074][T24924] ? device_add_disk+0x40/0x40 [ 735.352955][T24924] ? loop_add+0x400/0x760 [ 735.357402][T24924] ? vsprintf+0x40/0x40 [ 735.361588][T24924] device_add_disk+0x2a/0x40 [ 735.366223][T24924] loop_add+0x58f/0x760 [ 735.370397][T24924] loop_control_ioctl+0x564/0x740 [ 735.375473][T24924] ? loop_remove+0xb0/0xb0 [ 735.380056][T24924] ? __fget_files+0x310/0x370 [ 735.384786][T24924] ? security_file_ioctl+0xb1/0xd0 [ 735.389920][T24924] ? loop_remove+0xb0/0xb0 [ 735.394358][T24924] __se_sys_ioctl+0x115/0x190 [ 735.399041][T24924] __x64_sys_ioctl+0x7b/0x90 21:23:39 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) dup(r3) (async) r4 = dup(r3) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = creat(&(0x7f0000000200)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000020000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000280)="75f30fc734660f070f01cbba200066ed0f38f6bcbffa2e0f63f6f3e10f650f01c80fd3c1", 0x24}], 0x1, 0x4, &(0x7f0000000300), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x5000}) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x0, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) dup(r7) (async) r8 = dup(r7) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x0, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x0, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) dup2(r3, r3) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r10, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffffffffffe}]}) (async) ioctl$KVM_SET_PIT(r10, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffffffffffe}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) (async) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000000f00)={0x0, 0x0, @ioapic}) (async) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000000f00)={0x0, 0x0, @ioapic}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @loopback, @empty}}) [ 735.403655][T24924] do_syscall_64+0x34/0x70 [ 735.408115][T24924] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 735.414029][T24924] RIP: 0033:0x7fb457f980f9 [ 735.418484][T24924] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 735.439573][T24924] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 735.448345][T24924] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 21:23:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @loopback, @empty}}) [ 735.456377][T24924] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 735.464467][T24924] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 735.473848][T24924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 735.481846][T24924] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 735.490037][T24924] ---[ end trace e057be27904f7518 ]--- 21:23:39 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 37) 21:23:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @loopback, @empty}}) 21:23:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x80087601, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 735.512809][T24944] x_tables: duplicate underflow at hook 1 [ 735.523071][T24923] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 735.535700][T24945] x_tables: duplicate underflow at hook 1 [ 735.536618][T24944] x_tables: duplicate underflow at hook 1 [ 735.547446][T24923] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 735.548315][T24926] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 735.572935][T24926] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 735.584418][T24950] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 735.593731][T24951] FAULT_INJECTION: forcing a failure. [ 735.593731][T24951] name failslab, interval 1, probability 0, space 0, times 0 [ 735.606421][T24945] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 735.614103][T24951] CPU: 1 PID: 24951 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 735.626319][T24951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 735.636363][T24951] Call Trace: [ 735.639658][T24951] dump_stack_lvl+0x1e2/0x24b [ 735.644336][T24951] ? panic+0x7d7/0x7d7 [ 735.648403][T24951] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 735.654478][T24951] ? bfq_pos_tree_add_move+0x43e/0x43e [ 735.659936][T24951] dump_stack+0x15/0x17 [ 735.664092][T24951] should_fail+0x3c0/0x510 [ 735.668507][T24951] ? kvasprintf_const+0x139/0x180 [ 735.673522][T24951] __should_failslab+0x9f/0xe0 [ 735.678288][T24951] should_failslab+0x9/0x20 [ 735.682790][T24951] __kmalloc_track_caller+0x5f/0x350 [ 735.688083][T24951] ? __hrtimer_init+0x17b/0x260 [ 735.692942][T24951] kstrdup_const+0x55/0x90 [ 735.697346][T24951] kvasprintf_const+0x139/0x180 [ 735.702194][T24951] kobject_set_name_vargs+0x61/0x120 [ 735.707482][T24951] device_create+0x222/0x2e0 [ 735.712070][T24951] ? root_device_unregister+0x80/0x80 [ 735.717450][T24951] ? number+0xd9b/0x1040 [ 735.721709][T24951] bdi_register_va+0x94/0x600 [ 735.726408][T24951] bdi_register+0xd1/0x120 [ 735.730939][T24951] ? __device_add_disk+0x536/0x11d0 [ 735.736135][T24951] ? bdi_register_va+0x600/0x600 [ 735.741066][T24951] ? vsnprintf+0x1bfd/0x1cd0 [ 735.745813][T24951] ? __kasan_check_read+0x11/0x20 [ 735.750844][T24951] ? blk_alloc_devt+0xd4/0x320 [ 735.756606][T24951] __device_add_disk+0x5cb/0x11d0 [ 735.761640][T24951] ? device_add_disk+0x40/0x40 [ 735.766425][T24951] ? loop_add+0x400/0x760 [ 735.770752][T24951] ? vsprintf+0x40/0x40 [ 735.774903][T24951] device_add_disk+0x2a/0x40 [ 735.779488][T24951] loop_add+0x58f/0x760 [ 735.783644][T24951] loop_control_ioctl+0x564/0x740 [ 735.788675][T24951] ? loop_remove+0xb0/0xb0 [ 735.793090][T24951] ? __fget_files+0x310/0x370 [ 735.797758][T24951] ? security_file_ioctl+0xb1/0xd0 [ 735.802867][T24951] ? loop_remove+0xb0/0xb0 [ 735.807286][T24951] __se_sys_ioctl+0x115/0x190 [ 735.811952][T24951] __x64_sys_ioctl+0x7b/0x90 [ 735.816533][T24951] do_syscall_64+0x34/0x70 [ 735.820937][T24951] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 735.826831][T24951] RIP: 0033:0x7fb457f980f9 [ 735.831257][T24951] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 735.850880][T24951] RSP: 002b:00007fb456cea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 735.859296][T24951] RAX: ffffffffffffffda RBX: 00007fb4580b8050 RCX: 00007fb457f980f9 [ 735.867274][T24951] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 735.875281][T24951] RBP: 00007fb456cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 735.883342][T24951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 735.891315][T24951] R13: 00007ffeb359550f R14: 00007fb456cea300 R15: 0000000000022000 [ 735.900233][T24951] ------------[ cut here ]------------ [ 735.905854][T24951] WARNING: CPU: 1 PID: 24951 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 735.915531][T24951] Modules linked in: [ 735.919727][T24951] CPU: 1 PID: 24951 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 735.931510][T24951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 735.941793][T24951] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 735.947643][T24951] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 735.967387][T24951] RSP: 0018:ffffc90009f5fbc0 EFLAGS: 00010283 [ 735.973702][T24951] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 735.981697][T24951] RDX: ffffc9000173e000 RSI: 00000000000219be RDI: 00000000000219bf [ 735.989717][T24951] RBP: ffffc90009f5fd08 R08: ffffffff82412a76 R09: ffffc90009f5f5dc [ 735.997741][T24951] R10: 0000000000000014 R11: ffffffff84c00596 R12: 0000000000000007 [ 736.005748][T24951] R13: ffff888105fa6000 R14: ffff888112dbc338 R15: ffff888112dbc000 [ 736.013807][T24951] FS: 00007fb456cea700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 736.022878][T24951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.029468][T24951] CR2: 0000000020010000 CR3: 000000011d36b000 CR4: 00000000003526a0 [ 736.037474][T24951] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 736.045496][T24951] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 736.053495][T24951] Call Trace: [ 736.056809][T24951] ? device_add_disk+0x40/0x40 [ 736.061579][T24951] ? loop_add+0x400/0x760 [ 736.065939][T24951] ? vsprintf+0x40/0x40 [ 736.070118][T24951] device_add_disk+0x2a/0x40 [ 736.074749][T24951] loop_add+0x58f/0x760 [ 736.078937][T24951] loop_control_ioctl+0x564/0x740 [ 736.084006][T24951] ? loop_remove+0xb0/0xb0 [ 736.088526][T24951] ? __fget_files+0x310/0x370 [ 736.093237][T24951] ? security_file_ioctl+0xb1/0xd0 [ 736.098415][T24951] ? loop_remove+0xb0/0xb0 [ 736.102887][T24951] __se_sys_ioctl+0x115/0x190 [ 736.107681][T24951] __x64_sys_ioctl+0x7b/0x90 [ 736.112313][T24951] do_syscall_64+0x34/0x70 [ 736.116734][T24951] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 736.122681][T24951] RIP: 0033:0x7fb457f980f9 [ 736.127127][T24951] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 736.146824][T24951] RSP: 002b:00007fb456cea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 736.155265][T24951] RAX: ffffffffffffffda RBX: 00007fb4580b8050 RCX: 00007fb457f980f9 [ 736.163284][T24951] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 736.171354][T24951] RBP: 00007fb456cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 736.179356][T24951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 736.187368][T24951] R13: 00007ffeb359550f R14: 00007fb456cea300 R15: 0000000000022000 [ 736.195365][T24951] ---[ end trace e057be27904f7519 ]--- 21:23:40 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty}}) 21:23:40 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:40 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 38) 21:23:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, @loopback, @empty}}) [ 736.347197][T24958] FAULT_INJECTION: forcing a failure. [ 736.347197][T24958] name failslab, interval 1, probability 0, space 0, times 0 [ 736.363055][T24965] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 736.366747][T24958] CPU: 0 PID: 24958 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 736.382707][T24965] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 736.387155][T24958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 736.387161][T24958] Call Trace: [ 736.387185][T24958] dump_stack_lvl+0x1e2/0x24b [ 736.387205][T24958] ? panic+0x7d7/0x7d7 [ 736.421371][T24958] ? bfq_pos_tree_add_move+0x43e/0x43e [ 736.426825][T24958] dump_stack+0x15/0x17 [ 736.430975][T24958] should_fail+0x3c0/0x510 [ 736.435405][T24958] ? device_add+0xbe/0xbd0 [ 736.439816][T24958] __should_failslab+0x9f/0xe0 [ 736.444577][T24958] should_failslab+0x9/0x20 [ 736.449070][T24958] kmem_cache_alloc_trace+0x3a/0x330 [ 736.454348][T24958] ? __kasan_check_write+0x14/0x20 [ 736.459452][T24958] device_add+0xbe/0xbd0 [ 736.463686][T24958] ? kfree_const+0x39/0x40 [ 736.468091][T24958] ? kobject_set_name_vargs+0xce/0x120 [ 736.473552][T24958] device_create+0x258/0x2e0 [ 736.478138][T24958] ? root_device_unregister+0x80/0x80 [ 736.483507][T24958] ? number+0xd9b/0x1040 [ 736.487747][T24958] bdi_register_va+0x94/0x600 [ 736.492420][T24958] bdi_register+0xd1/0x120 [ 736.496835][T24958] ? __device_add_disk+0x536/0x11d0 [ 736.502043][T24958] ? bdi_register_va+0x600/0x600 [ 736.506972][T24958] ? vsnprintf+0x1bfd/0x1cd0 [ 736.511553][T24958] ? __kasan_check_read+0x11/0x20 [ 736.516717][T24958] ? blk_alloc_devt+0xd4/0x320 [ 736.521485][T24958] __device_add_disk+0x5cb/0x11d0 [ 736.526529][T24958] ? device_add_disk+0x40/0x40 [ 736.531286][T24958] ? loop_add+0x400/0x760 [ 736.535604][T24958] ? vsprintf+0x40/0x40 [ 736.539755][T24958] device_add_disk+0x2a/0x40 [ 736.544340][T24958] loop_add+0x58f/0x760 [ 736.548494][T24958] loop_control_ioctl+0x564/0x740 [ 736.553510][T24958] ? loop_remove+0xb0/0xb0 [ 736.557917][T24958] ? __fget_files+0x310/0x370 [ 736.562589][T24958] ? security_file_ioctl+0xb1/0xd0 [ 736.567810][T24958] ? loop_remove+0xb0/0xb0 [ 736.572252][T24958] __se_sys_ioctl+0x115/0x190 [ 736.576925][T24958] __x64_sys_ioctl+0x7b/0x90 [ 736.581511][T24958] do_syscall_64+0x34/0x70 [ 736.585921][T24958] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 736.591808][T24958] RIP: 0033:0x7fb457f980f9 [ 736.596228][T24958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 736.615846][T24958] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 736.624255][T24958] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 736.632225][T24958] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 736.640205][T24958] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 21:23:40 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r4 = dup(r3) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = creat(&(0x7f0000000200)='./file0\x00', 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000020000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000280)="75f30fc734660f070f01cbba200066ed0f38f6bcbffa2e0f63f6f3e10f650f01c80fd3c1", 0x24}], 0x1, 0x4, &(0x7f0000000300), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x5000}) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x0, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x0, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) r8 = dup(r7) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0xe8, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f00000004c0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffffff, 0xffffff00, 0x0, 0x5, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x6, 0x8, 0x2, 0x8000, 0x101, 0x200, 'ipvlan0\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @local, 0x1}}}, {{@arp={@remote, @empty, 0xffffff00, 0x0, 0x5, 0x9, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x1f, 0x2736, 0x8, 0x9, 0xfff7, 0x3, 'wg2\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) dup2(r3, r3) (async) dup2(r3, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT(r10, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffffffffffe}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) (async) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000000f00)={0x0, 0x0, @ioapic}) (async) ioctl$KVM_GET_IRQCHIP(r8, 0xc208ae62, &(0x7f0000000f00)={0x0, 0x0, @ioapic}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0045878, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, @loopback, @empty}}) 21:23:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc0189436, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, @loopback, @empty}}) [ 736.648188][T24958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 736.656154][T24958] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 736.666932][T24958] ------------[ cut here ]------------ [ 736.674389][T24958] WARNING: CPU: 1 PID: 24958 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 736.683830][T24958] Modules linked in: 21:23:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, @loopback, @empty}}) [ 736.687863][T24958] CPU: 1 PID: 24958 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 736.699942][T24958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 736.710592][T24958] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 736.716694][T24958] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 736.736563][T24958] RSP: 0018:ffffc90009f5fbc0 EFLAGS: 00010246 [ 736.742795][T24958] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 736.750840][T24958] RDX: ffffc9000153d000 RSI: 000000000003ffff RDI: 0000000000040000 [ 736.759241][T24958] RBP: ffffc90009f5fd08 R08: ffffffff82412a76 R09: 0000000000000003 [ 736.767314][T24958] R10: fffff520013ebe8d R11: 1ffff920013ebe8c R12: 0000000000000007 [ 736.775395][T24958] R13: ffff88815bd46000 R14: ffff88811db40338 R15: ffff88811db40000 [ 736.783509][T24958] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 736.792648][T24958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 736.799221][T24958] CR2: 00007fdb5cfef988 CR3: 000000010e99b000 CR4: 00000000003506a0 [ 736.807358][T24958] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 736.815429][T24958] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 736.823493][T24958] Call Trace: [ 736.826844][T24958] ? device_add_disk+0x40/0x40 [ 736.831669][T24958] ? loop_add+0x400/0x760 [ 736.836078][T24958] ? vsprintf+0x40/0x40 [ 736.840285][T24958] device_add_disk+0x2a/0x40 [ 736.844941][T24958] loop_add+0x58f/0x760 [ 736.849236][T24958] loop_control_ioctl+0x564/0x740 [ 736.854378][T24958] ? loop_remove+0xb0/0xb0 [ 736.858841][T24958] ? __fget_files+0x310/0x370 [ 736.863605][T24958] ? security_file_ioctl+0xb1/0xd0 [ 736.868789][T24958] ? loop_remove+0xb0/0xb0 [ 736.873290][T24958] __se_sys_ioctl+0x115/0x190 [ 736.878032][T24958] __x64_sys_ioctl+0x7b/0x90 [ 736.882759][T24958] do_syscall_64+0x34/0x70 [ 736.887204][T24958] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 736.893233][T24958] RIP: 0033:0x7fb457f980f9 [ 736.897674][T24958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 736.917499][T24958] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 736.926001][T24958] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 736.934871][T24958] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 736.943056][T24958] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 736.951140][T24958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 736.959205][T24958] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 736.967246][T24958] ---[ end trace e057be27904f751a ]--- [ 736.987577][T24981] x_tables: duplicate underflow at hook 1 21:23:40 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0xc020660b, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 736.997228][T24984] x_tables: duplicate underflow at hook 1 [ 737.000228][T24966] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 737.014177][T24981] x_tables: duplicate underflow at hook 1 [ 737.022170][T24966] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 737.041691][T24966] EXT4-fs mount: 32 callbacks suppressed [ 737.041707][T24966] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 737.071168][T24989] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr 21:23:41 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs271vHEUbAPBn7+x8OXntN4SPOAGMAGHxYcdOgBQUgECiAAkJilAa24lMLjGKjUQiCwxFKCESPaJE4i+gggYBFRIt9ChShNwkUB3au137fLkzPvvsC+zvJ20yszunmWdn5252xxtAYY2k/yQRByPi14gYrGfXFxip/3drZWn6z5Wl6SSq1Tf+SGrlbq4sTedF888N5Jnlev5Yi3oXLl85P1WpzF7K8uOLF94dX7h85am5C1PnZs/NXpw8ffrUyYlnn5l8uitxpnHdHP5g/vjRV9669tr0mWtv//h1ksffFEeXjGx08NEuV9ZrhxrSSV8PG0JHyhGRdld/bfwPRjnWOm8wXv64p40DdlS1Wq3ubX94XxX4D0ui1y0AeiP/oU/vf/Ntl6Yed4QbL9RvgNK4b2Vb/UhflLIy/U33t900EhFnlv/6It1iZ55DAACs8206/3my1fyvFPc0lPtftoYyFBH/j4jDEXFXRByJiLsjamXvjYj7Oqy/eZHk9vlP6fqWAtukdP73XLa2tX7+l8/+Yqic5Q7V4u9Pzs5VZk9k52Q0+vem+YkN6vjupV8+bXescf6Xbmn9+Vwwa8f1vqYHdDNTi1PbibnRjY8ihvtaxZ+srgQkEXE0Ioa3WMfc418db3fsn+PfQBfWmapfRjxW7//laIo/l2y8Pjm+LyqzJ8bzq+J2P/189fV29W8r/i5I+/9Ay+t/Nf6hpHG9dqHzOq7+9knbe5qtXv97kjdr6T3ZvvenFhcvTUTsSV7N9j+/tn9y7bN5Pi+fxj/6cOvxfzjWzsSxiEgv4vsj4oGIeDBr+0MRMfDZxvH/8OIj72w9/p2Vxj/TUf93niif//6bdZUOdRJ/2v+naqnRbM9mvv8228Dtnj8AAAD4NyhFxMFISmOr6VJpbKz+N/xH4kCpMr+w+MTZ+fcuztTfERiK/lL+pGuw4XnoRHZbn+cnm/Ins+fGn5f31/Jj0/OVmV4HDwU30Gb8p34v97p1wI7zvhYUl/EPxWX8Q3EZ/1BcLcb//l60A9h9rX7/P+xBO4DdZ/4PxWX8Q3EZ/1Bcxj8U0nbe65cociJKd0QzJHYo0etvJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO74OwAA///RqeZ6") 21:23:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, @loopback, @empty}}) 21:23:41 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 39) 21:23:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 737.090067][T24989] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 737.094099][T24981] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 737.102755][T24989] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 737.183980][T24999] FAULT_INJECTION: forcing a failure. [ 737.183980][T24999] name failslab, interval 1, probability 0, space 0, times 0 [ 737.196722][T24999] CPU: 1 PID: 24999 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 737.208426][T24999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 737.218491][T24999] Call Trace: [ 737.221779][T24999] dump_stack_lvl+0x1e2/0x24b [ 737.226453][T24999] ? bfq_pos_tree_add_move+0x43e/0x43e [ 737.231906][T24999] dump_stack+0x15/0x17 [ 737.236052][T24999] should_fail+0x3c0/0x510 [ 737.240471][T24999] ? __kernfs_new_node+0x99/0x6e0 [ 737.245509][T24999] __should_failslab+0x9f/0xe0 [ 737.250259][T24999] should_failslab+0x9/0x20 [ 737.254756][T24999] __kmalloc_track_caller+0x5f/0x350 [ 737.260038][T24999] ? __kernel_text_address+0x9a/0x110 [ 737.265405][T24999] ? unwind_get_return_address+0x4c/0x90 [ 737.271024][T24999] kstrdup_const+0x55/0x90 [ 737.275444][T24999] __kernfs_new_node+0x99/0x6e0 [ 737.280281][T24999] ? stack_trace_save+0x12d/0x1f0 [ 737.285411][T24999] ? kernfs_new_node+0x170/0x170 [ 737.290353][T24999] ? stack_trace_snprint+0x100/0x100 [ 737.295629][T24999] ? stack_trace_save+0x12d/0x1f0 [ 737.300654][T24999] ? device_add+0xbe/0xbd0 [ 737.305058][T24999] kernfs_create_dir_ns+0x9b/0x230 [ 737.310155][T24999] sysfs_create_dir_ns+0x181/0x390 [ 737.315253][T24999] ? sysfs_warn_dup+0xa0/0xa0 [ 737.319922][T24999] kobject_add_internal+0x766/0xda0 [ 737.325196][T24999] kobject_add+0x14c/0x210 [ 737.329597][T24999] ? _raw_spin_lock+0xa3/0x1b0 [ 737.334348][T24999] ? kobject_init+0x1e0/0x1e0 [ 737.339010][T24999] ? mutex_unlock+0x29/0xf0 [ 737.343511][T24999] ? get_device_parent+0x2c5/0x430 [ 737.348633][T24999] device_add+0x3ca/0xbd0 [ 737.352965][T24999] device_create+0x258/0x2e0 [ 737.357552][T24999] ? root_device_unregister+0x80/0x80 [ 737.362913][T24999] ? number+0xd9b/0x1040 [ 737.367145][T24999] bdi_register_va+0x94/0x600 [ 737.371822][T24999] bdi_register+0xd1/0x120 [ 737.376255][T24999] ? __device_add_disk+0x536/0x11d0 [ 737.381465][T24999] ? bdi_register_va+0x600/0x600 [ 737.386391][T24999] ? vsnprintf+0x1bfd/0x1cd0 [ 737.390970][T24999] ? __kasan_check_read+0x11/0x20 [ 737.395981][T24999] ? blk_alloc_devt+0xd4/0x320 [ 737.400732][T24999] __device_add_disk+0x5cb/0x11d0 [ 737.405745][T24999] ? device_add_disk+0x40/0x40 [ 737.410498][T24999] ? loop_add+0x400/0x760 [ 737.414830][T24999] ? vsprintf+0x40/0x40 [ 737.418978][T24999] device_add_disk+0x2a/0x40 [ 737.423552][T24999] loop_add+0x58f/0x760 [ 737.427700][T24999] loop_control_ioctl+0x564/0x740 [ 737.432712][T24999] ? loop_remove+0xb0/0xb0 [ 737.437135][T24999] ? __fget_files+0x310/0x370 [ 737.441821][T24999] ? security_file_ioctl+0xb1/0xd0 [ 737.446917][T24999] ? loop_remove+0xb0/0xb0 [ 737.451321][T24999] __se_sys_ioctl+0x115/0x190 [ 737.455985][T24999] __x64_sys_ioctl+0x7b/0x90 [ 737.460559][T24999] do_syscall_64+0x34/0x70 [ 737.464963][T24999] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 737.470839][T24999] RIP: 0033:0x7fb457f980f9 [ 737.475241][T24999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 737.494834][T24999] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 737.503239][T24999] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 737.511215][T24999] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 737.519174][T24999] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 737.527138][T24999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 737.535112][T24999] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 737.544474][T24999] kobject_add_internal failed for 7:0 (error: -12 parent: bdi) [ 737.552301][T24999] ------------[ cut here ]------------ [ 737.557844][T24999] WARNING: CPU: 1 PID: 24999 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 737.567026][T24999] Modules linked in: [ 737.571013][T24999] CPU: 1 PID: 24999 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 737.583345][T24999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 737.593588][T24999] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 737.599472][T24999] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 737.619182][T24999] RSP: 0018:ffffc9000a1cfbc0 EFLAGS: 00010283 [ 737.625300][T24999] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 737.633325][T24999] RDX: ffffc9000153d000 RSI: 000000000002a8f7 RDI: 000000000002a8f8 [ 737.641354][T24999] RBP: ffffc9000a1cfd08 R08: ffffffff82412a76 R09: ffffc9000a1cf610 [ 737.649379][T24999] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 737.657420][T24999] R13: ffff88816e6e3000 R14: ffff88816e6e4338 R15: ffff88816e6e4000 [ 737.665456][T24999] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 737.674473][T24999] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 737.681118][T24999] CR2: 00007fb456d0aff8 CR3: 000000010d0cf000 CR4: 00000000003526a0 [ 737.689326][T24999] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 737.697394][T24999] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 737.705485][T24999] Call Trace: [ 737.708806][T24999] ? device_add_disk+0x40/0x40 [ 737.713630][T24999] ? loop_add+0x400/0x760 [ 737.717999][T24999] ? vsprintf+0x40/0x40 [ 737.722221][T24999] device_add_disk+0x2a/0x40 [ 737.726869][T24999] loop_add+0x58f/0x760 [ 737.731067][T24999] loop_control_ioctl+0x564/0x740 [ 737.736153][T24999] ? loop_remove+0xb0/0xb0 [ 737.740613][T24999] ? __fget_files+0x310/0x370 [ 737.745349][T24999] ? security_file_ioctl+0xb1/0xd0 [ 737.750584][T24999] ? loop_remove+0xb0/0xb0 [ 737.755045][T24999] __se_sys_ioctl+0x115/0x190 [ 737.759770][T24999] __x64_sys_ioctl+0x7b/0x90 [ 737.764507][T24999] do_syscall_64+0x34/0x70 [ 737.768960][T24999] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 737.774909][T24999] RIP: 0033:0x7fb457f980f9 [ 737.779356][T24999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 737.799233][T24999] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 737.807720][T24999] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 737.815813][T24999] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 737.823927][T24999] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 21:23:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, @loopback, @empty}}) 21:23:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:41 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:41 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff3}, {0xffe0, 0xffe0}, {0xfff1, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffb}, @TCA_RATE={0x6, 0x5, {0xfb, 0xa}}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x80000000}}, @TCA_RATE={0x6, 0x5, {0xca, 0x7f}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x80}}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x11) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) dup(r5) splice(r5, &(0x7f00000000c0)=0x7, r2, &(0x7f00000001c0)=0x5, 0x8000000000000001, 0x4) 21:23:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, @loopback, @empty}}) 21:23:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xb00, 0x0, @loopback, @empty}}) [ 737.832022][T24999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 737.840087][T24999] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 737.848099][T24999] ---[ end trace e057be27904f751b ]--- 21:23:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, @loopback, @empty}}) 21:23:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 737.926301][T25002] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 737.945970][T25015] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 737.959417][T25015] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 737.967348][T25024] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 737.974431][T25002] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 737.983434][T25015] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 737.993496][T25002] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:41 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 40) 21:23:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, @loopback, @empty}}) 21:23:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:41 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:41 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:41 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, @loopback, @empty}}) [ 738.113836][T25030] FAULT_INJECTION: forcing a failure. [ 738.113836][T25030] name failslab, interval 1, probability 0, space 0, times 0 [ 738.126870][T25030] CPU: 0 PID: 25030 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 738.138662][T25030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 738.148709][T25030] Call Trace: [ 738.152008][T25030] dump_stack_lvl+0x1e2/0x24b [ 738.156672][T25030] ? panic+0x7d7/0x7d7 [ 738.160727][T25030] ? bfq_pos_tree_add_move+0x43e/0x43e [ 738.166171][T25030] dump_stack+0x15/0x17 [ 738.170314][T25030] should_fail+0x3c0/0x510 [ 738.174720][T25030] __should_failslab+0x9f/0xe0 [ 738.179472][T25030] should_failslab+0x9/0x20 [ 738.184052][T25030] kmem_cache_alloc+0x3f/0x300 [ 738.188905][T25030] ? __kernfs_new_node+0xdb/0x6e0 [ 738.193935][T25030] __kernfs_new_node+0xdb/0x6e0 [ 738.198866][T25030] ? stack_trace_save+0x12d/0x1f0 [ 738.203881][T25030] ? kernfs_new_node+0x170/0x170 [ 738.208833][T25030] ? stack_trace_snprint+0x100/0x100 [ 738.214124][T25030] ? stack_trace_save+0x12d/0x1f0 [ 738.219136][T25030] ? device_add+0xbe/0xbd0 [ 738.223542][T25030] kernfs_create_dir_ns+0x9b/0x230 [ 738.228645][T25030] sysfs_create_dir_ns+0x181/0x390 [ 738.233745][T25030] ? sysfs_warn_dup+0xa0/0xa0 [ 738.238412][T25030] kobject_add_internal+0x766/0xda0 [ 738.243614][T25030] kobject_add+0x14c/0x210 [ 738.248055][T25030] ? _raw_spin_lock+0xa3/0x1b0 [ 738.252813][T25030] ? kobject_init+0x1e0/0x1e0 [ 738.257484][T25030] ? mutex_unlock+0x29/0xf0 [ 738.262104][T25030] ? get_device_parent+0x2c5/0x430 [ 738.267228][T25030] device_add+0x3ca/0xbd0 [ 738.271552][T25030] device_create+0x258/0x2e0 [ 738.276136][T25030] ? root_device_unregister+0x80/0x80 [ 738.281498][T25030] ? number+0xd9b/0x1040 [ 738.285735][T25030] bdi_register_va+0x94/0x600 [ 738.290405][T25030] bdi_register+0xd1/0x120 [ 738.294819][T25030] ? __device_add_disk+0x536/0x11d0 [ 738.300011][T25030] ? bdi_register_va+0x600/0x600 [ 738.304942][T25030] ? vsnprintf+0x1bfd/0x1cd0 [ 738.309721][T25030] ? __kasan_check_read+0x11/0x20 [ 738.314825][T25030] ? blk_alloc_devt+0xd4/0x320 [ 738.319583][T25030] __device_add_disk+0x5cb/0x11d0 [ 738.324603][T25030] ? device_add_disk+0x40/0x40 [ 738.329444][T25030] ? loop_add+0x400/0x760 [ 738.333760][T25030] ? vsprintf+0x40/0x40 [ 738.337908][T25030] device_add_disk+0x2a/0x40 [ 738.342488][T25030] loop_add+0x58f/0x760 [ 738.346652][T25030] loop_control_ioctl+0x564/0x740 [ 738.351684][T25030] ? loop_remove+0xb0/0xb0 [ 738.356101][T25030] ? __fget_files+0x310/0x370 [ 738.360772][T25030] ? security_file_ioctl+0xb1/0xd0 [ 738.365874][T25030] ? loop_remove+0xb0/0xb0 [ 738.370298][T25030] __se_sys_ioctl+0x115/0x190 [ 738.374988][T25030] __x64_sys_ioctl+0x7b/0x90 [ 738.379583][T25030] do_syscall_64+0x34/0x70 [ 738.383998][T25030] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 738.389881][T25030] RIP: 0033:0x7fb457f980f9 [ 738.394295][T25030] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 738.413890][T25030] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 738.422307][T25030] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 738.430276][T25030] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 738.438253][T25030] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 738.446226][T25030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 738.454193][T25030] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 738.462490][T25030] kobject_add_internal failed for 7:0 (error: -12 parent: bdi) [ 738.470286][T25030] ------------[ cut here ]------------ [ 738.476088][T25030] WARNING: CPU: 1 PID: 25030 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 738.485299][T25030] Modules linked in: [ 738.489327][T25030] CPU: 0 PID: 25030 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 738.501181][T25030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 738.511492][T25030] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 738.517461][T25030] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 738.537201][T25030] RSP: 0018:ffffc9000a3cfbc0 EFLAGS: 00010287 [ 738.543478][T25030] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 738.551465][T25030] RDX: ffffc9000153d000 RSI: 00000000000276c4 RDI: 00000000000276c5 [ 738.559582][T25030] RBP: ffffc9000a3cfd08 R08: ffffffff82412a76 R09: ffffc9000a3cf610 [ 738.567694][T25030] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 738.575772][T25030] R13: ffff88810639d000 R14: ffff88815a1d3338 R15: ffff88815a1d3000 [ 738.583850][T25030] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 738.592874][T25030] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 738.599446][T25030] CR2: 00007fcd583d1000 CR3: 000000015e08d000 CR4: 00000000003506a0 [ 738.607552][T25030] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 738.615629][T25030] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 738.623734][T25030] Call Trace: [ 738.627025][T25030] ? device_add_disk+0x40/0x40 [ 738.631777][T25030] ? loop_add+0x400/0x760 [ 738.636273][T25030] ? vsprintf+0x40/0x40 [ 738.640424][T25030] device_add_disk+0x2a/0x40 [ 738.645139][T25030] loop_add+0x58f/0x760 [ 738.649286][T25030] loop_control_ioctl+0x564/0x740 [ 738.654432][T25030] ? loop_remove+0xb0/0xb0 [ 738.658838][T25030] ? __fget_files+0x310/0x370 [ 738.663672][T25030] ? security_file_ioctl+0xb1/0xd0 [ 738.668860][T25030] ? loop_remove+0xb0/0xb0 [ 738.673387][T25030] __se_sys_ioctl+0x115/0x190 [ 738.678142][T25030] __x64_sys_ioctl+0x7b/0x90 [ 738.682854][T25030] do_syscall_64+0x34/0x70 [ 738.687356][T25030] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 738.693394][T25030] RIP: 0033:0x7fb457f980f9 21:23:42 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff3}, {0xffe0, 0xffe0}, {0xfff1, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffb}, @TCA_RATE={0x6, 0x5, {0xfb, 0xa}}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x80000000}}, @TCA_RATE={0x6, 0x5, {0xca, 0x7f}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x80}}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x11) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) dup(r5) (async) dup(r5) splice(r5, &(0x7f00000000c0)=0x7, r2, &(0x7f00000001c0)=0x5, 0x8000000000000001, 0x4) 21:23:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, @loopback, @empty}}) 21:23:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, @loopback, @empty}}) [ 738.697880][T25030] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 738.717597][T25030] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 738.726242][T25030] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 738.734451][T25030] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 738.742767][T25030] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 738.750807][T25030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 21:23:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @loopback, @empty}}) [ 738.759386][T25030] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 738.767754][T25030] ---[ end trace e057be27904f751c ]--- [ 738.804294][T25032] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr 21:23:42 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 41) 21:23:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @loopback, @empty}}) [ 738.804963][T25036] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 738.844668][T25056] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 738.848899][T25036] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) 21:23:42 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, @loopback, @empty}}) [ 738.854277][T25032] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 738.886251][T25032] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 738.898105][T25036] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 738.910367][T25053] FAULT_INJECTION: forcing a failure. [ 738.910367][T25053] name failslab, interval 1, probability 0, space 0, times 0 [ 738.923065][T25053] CPU: 0 PID: 25053 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 738.934795][T25053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 738.944850][T25053] Call Trace: [ 738.948133][T25053] dump_stack_lvl+0x1e2/0x24b [ 738.953083][T25053] ? bfq_pos_tree_add_move+0x43e/0x43e [ 738.958535][T25053] dump_stack+0x15/0x17 [ 738.962703][T25053] should_fail+0x3c0/0x510 [ 738.967115][T25053] __should_failslab+0x9f/0xe0 [ 738.971875][T25053] should_failslab+0x9/0x20 [ 738.976375][T25053] kmem_cache_alloc+0x3f/0x300 [ 738.981146][T25053] ? radix_tree_node_alloc+0x194/0x3c0 [ 738.986594][T25053] radix_tree_node_alloc+0x194/0x3c0 [ 738.991872][T25053] ? kernfs_create_dir_ns+0x9b/0x230 [ 738.997144][T25053] ? sysfs_create_dir_ns+0x181/0x390 [ 739.002442][T25053] ? kobject_add_internal+0x766/0xda0 [ 739.007820][T25053] ? device_add+0x3ca/0xbd0 [ 739.012308][T25053] idr_get_free+0x2d8/0x990 [ 739.016805][T25053] ? __x64_sys_ioctl+0x7b/0x90 [ 739.021670][T25053] idr_alloc_cyclic+0x1ef/0x5d0 [ 739.026522][T25053] ? idr_alloc+0x2f0/0x2f0 [ 739.030935][T25053] ? __kasan_check_write+0x14/0x20 [ 739.036048][T25053] ? _raw_spin_lock+0xa3/0x1b0 [ 739.040795][T25053] ? __radix_tree_preload+0x361/0x3e0 [ 739.046166][T25053] ? kmem_cache_alloc+0x1a4/0x300 [ 739.051176][T25053] __kernfs_new_node+0x124/0x6e0 [ 739.056112][T25053] ? kernfs_new_node+0x170/0x170 [ 739.061047][T25053] ? stack_trace_snprint+0x100/0x100 [ 739.066328][T25053] ? stack_trace_save+0x12d/0x1f0 [ 739.071335][T25053] ? device_add+0xbe/0xbd0 [ 739.075741][T25053] kernfs_create_dir_ns+0x9b/0x230 [ 739.080840][T25053] sysfs_create_dir_ns+0x181/0x390 [ 739.085953][T25053] ? sysfs_warn_dup+0xa0/0xa0 [ 739.090615][T25053] kobject_add_internal+0x766/0xda0 [ 739.095797][T25053] kobject_add+0x14c/0x210 [ 739.100196][T25053] ? _raw_spin_lock+0xa3/0x1b0 [ 739.104946][T25053] ? kobject_init+0x1e0/0x1e0 [ 739.109606][T25053] ? mutex_unlock+0x29/0xf0 [ 739.115053][T25053] ? get_device_parent+0x2c5/0x430 [ 739.120148][T25053] device_add+0x3ca/0xbd0 [ 739.124477][T25053] device_create+0x258/0x2e0 [ 739.129052][T25053] ? root_device_unregister+0x80/0x80 [ 739.134411][T25053] ? number+0xd9b/0x1040 [ 739.138640][T25053] bdi_register_va+0x94/0x600 [ 739.143325][T25053] bdi_register+0xd1/0x120 [ 739.147741][T25053] ? __device_add_disk+0x536/0x11d0 [ 739.152931][T25053] ? bdi_register_va+0x600/0x600 [ 739.157859][T25053] ? vsnprintf+0x1bfd/0x1cd0 [ 739.162436][T25053] ? __kasan_check_read+0x11/0x20 [ 739.167449][T25053] ? blk_alloc_devt+0xd4/0x320 [ 739.172198][T25053] __device_add_disk+0x5cb/0x11d0 [ 739.177213][T25053] ? device_add_disk+0x40/0x40 [ 739.181961][T25053] ? loop_add+0x400/0x760 [ 739.186279][T25053] ? vsprintf+0x40/0x40 [ 739.190426][T25053] device_add_disk+0x2a/0x40 [ 739.195016][T25053] loop_add+0x58f/0x760 [ 739.199165][T25053] loop_control_ioctl+0x564/0x740 [ 739.204198][T25053] ? loop_remove+0xb0/0xb0 [ 739.208606][T25053] ? __fget_files+0x310/0x370 [ 739.213281][T25053] ? security_file_ioctl+0xb1/0xd0 [ 739.218381][T25053] ? loop_remove+0xb0/0xb0 [ 739.222783][T25053] __se_sys_ioctl+0x115/0x190 [ 739.227445][T25053] __x64_sys_ioctl+0x7b/0x90 [ 739.232028][T25053] do_syscall_64+0x34/0x70 [ 739.236431][T25053] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 739.242315][T25053] RIP: 0033:0x7fb457f980f9 [ 739.246737][T25053] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 739.266348][T25053] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 739.274757][T25053] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 739.282719][T25053] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 739.290681][T25053] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 739.298657][T25053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 739.306627][T25053] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:43 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 42) 21:23:43 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @loopback, @empty}}) 21:23:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 739.426252][T25066] FAULT_INJECTION: forcing a failure. [ 739.426252][T25066] name failslab, interval 1, probability 0, space 0, times 0 [ 739.438914][T25066] CPU: 0 PID: 25066 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 739.450630][T25066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 739.460690][T25066] Call Trace: [ 739.464094][T25066] dump_stack_lvl+0x1e2/0x24b [ 739.468779][T25066] ? bfq_pos_tree_add_move+0x43e/0x43e [ 739.474228][T25066] dump_stack+0x15/0x17 [ 739.478380][T25066] should_fail+0x3c0/0x510 [ 739.482791][T25066] __should_failslab+0x9f/0xe0 [ 739.487544][T25066] should_failslab+0x9/0x20 [ 739.492045][T25066] kmem_cache_alloc+0x3f/0x300 [ 739.496808][T25066] ? radix_tree_node_alloc+0x194/0x3c0 [ 739.502255][T25066] radix_tree_node_alloc+0x194/0x3c0 [ 739.507529][T25066] ? kernfs_create_dir_ns+0x9b/0x230 [ 739.512797][T25066] ? sysfs_create_dir_ns+0x181/0x390 [ 739.518066][T25066] ? kobject_add_internal+0x766/0xda0 [ 739.523425][T25066] ? device_add+0x3ca/0xbd0 [ 739.527927][T25066] idr_get_free+0x2d8/0x990 [ 739.532431][T25066] ? __x64_sys_ioctl+0x7b/0x90 [ 739.537186][T25066] idr_alloc_cyclic+0x1ef/0x5d0 [ 739.542023][T25066] ? idr_alloc+0x2f0/0x2f0 [ 739.546438][T25066] ? __kasan_check_write+0x14/0x20 [ 739.551532][T25066] ? _raw_spin_lock+0xa3/0x1b0 [ 739.556283][T25066] ? __radix_tree_preload+0x361/0x3e0 [ 739.561654][T25066] ? kmem_cache_alloc+0x1a4/0x300 [ 739.566675][T25066] __kernfs_new_node+0x124/0x6e0 [ 739.571610][T25066] ? kernfs_new_node+0x170/0x170 [ 739.576543][T25066] ? stack_trace_snprint+0x100/0x100 [ 739.582171][T25066] ? stack_trace_save+0x12d/0x1f0 [ 739.587190][T25066] ? device_add+0xbe/0xbd0 [ 739.591612][T25066] kernfs_create_dir_ns+0x9b/0x230 [ 739.596713][T25066] sysfs_create_dir_ns+0x181/0x390 [ 739.601812][T25066] ? sysfs_warn_dup+0xa0/0xa0 [ 739.606478][T25066] kobject_add_internal+0x766/0xda0 [ 739.611658][T25066] kobject_add+0x14c/0x210 [ 739.616064][T25066] ? _raw_spin_lock+0xa3/0x1b0 [ 739.620820][T25066] ? kobject_init+0x1e0/0x1e0 21:23:43 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff3}, {0xffe0, 0xffe0}, {0xfff1, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffb}, @TCA_RATE={0x6, 0x5, {0xfb, 0xa}}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x80000000}}, @TCA_RATE={0x6, 0x5, {0xca, 0x7f}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x80}}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x11) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) dup(r5) splice(r5, &(0x7f00000000c0)=0x7, r2, &(0x7f00000001c0)=0x5, 0x8000000000000001, 0x4) pipe(&(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) dup(r3) (async) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff3}, {0xffe0, 0xffe0}, {0xfff1, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffb}, @TCA_RATE={0x6, 0x5, {0xfb, 0xa}}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x80000000}}, @TCA_RATE={0x6, 0x5, {0xca, 0x7f}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x80}}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x11) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000300)=0xc) (async) dup(r5) (async) splice(r5, &(0x7f00000000c0)=0x7, r2, &(0x7f00000001c0)=0x5, 0x8000000000000001, 0x4) (async) 21:23:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:43 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs289PHFUcAPDv7EJrfwli/VFaFaNG4g8otGoPHtRo4kETEz3UIwJtsNtiCia2IYoe6lGbeDceTfwLPOnFqCcTr3o3TRrDpdXTmtmdgWW7iywsbHU+n2Ta92be5r3vvHm7b+YxARTWSPpPEnEwIn6LiIF6dn2Bkfp/N1eWpv9aWZpOolp988+kVu7GytJ0XjT/3IE8s1zPH21R78Kly+emKpXZi1l+fPH8e+MLly4/PXd+6uzs2dkLk6dOnTwx8dyzk890Jc40rhvDH84fO/Lq21dfnz599Z2fvkny+Jvi6JKRjQ4+1uXKeu1QQzrp62FD6Eg5ItLu6q+N/4Eox1rnDcQrn/S0ccCOqlar1b3tDw9Vgf+xJHrdAqA38h/69P4333Zp6nFbuP5i/QYojftmttWP9EUpK9PfdH/bTSMRcXr57y/TLXbmOQQAwDrfpfOfp1rN/0pxb0O5O7M1lMGIuCsihiLi7og4HBH3RNTK3hcR93dYf/Miya3zn9K1LQW2Sen87/lsbWv9/C+f/cVgOcsdqsXfn5yZq8wez87JaPTvTfMTG9Tx/cu/ftbuWOP8L93S+vO5YNaOa31ND+hmphanthNzo+sfRwz3tYo/WV0JSCLiSEQMb7GOuSe+Ptbu2L/Hv4EurDNVv4p4vN7/y9EUfy7ZeH1y/I6ozB4fz6+KW/38y5U32tW/rfi7IO3//S2v/9X4B5PG9dqFzuu48vunbe9ptnr970neqqX3ZPs+mFpcvDgRsSd5Ldv/wtr+ybXP5vm8fBr/6COtx/9QrJ2JoxGRXsQPRMSDEfFQ1vaHI+LA5xvH/+NLj7679fh3Vhr/TEf933mifO6Hb9dVOthJ/Gn/n6ylRrM9m/n+22wDt3v+AAAA4L+gFBEHIymNraZLpbGx+t/wH479pcr8wuKTZ+bfvzBTf0dgMPpL+ZOugYbnoRPZbX2en2zKn8ieG39R3lfLj03PV2Z6HTwU3IE24z/1R7nXrQN2nPe1oLiMfygu4x+Ky/iH4mox/vf1oh3A7mv1+/9RD9oB7D7zfygu4x+Ky/iH4jL+oZC2816/RJETUbotmiGxQ4lefzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0xz8BAAD//1rL5oQ=") 21:23:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, @loopback, @empty}}) 21:23:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, @loopback, @empty}}) 21:23:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, @loopback, @empty}}) [ 739.625503][T25066] ? mutex_unlock+0x29/0xf0 [ 739.630018][T25066] ? get_device_parent+0x2c5/0x430 [ 739.635135][T25066] device_add+0x3ca/0xbd0 [ 739.639485][T25066] device_create+0x258/0x2e0 [ 739.644089][T25066] ? root_device_unregister+0x80/0x80 [ 739.649476][T25066] ? number+0xd9b/0x1040 [ 739.653819][T25066] bdi_register_va+0x94/0x600 [ 739.658526][T25066] bdi_register+0xd1/0x120 [ 739.662961][T25066] ? __device_add_disk+0x536/0x11d0 [ 739.668176][T25066] ? bdi_register_va+0x600/0x600 21:23:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @loopback, @empty}}) 21:23:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x9000000, 0x0, @loopback, @empty}}) [ 739.673137][T25066] ? vsnprintf+0x1bfd/0x1cd0 [ 739.677742][T25066] ? __kasan_check_read+0x11/0x20 [ 739.682777][T25066] ? blk_alloc_devt+0xd4/0x320 [ 739.687551][T25066] __device_add_disk+0x5cb/0x11d0 [ 739.692593][T25066] ? device_add_disk+0x40/0x40 [ 739.697357][T25066] ? loop_add+0x400/0x760 [ 739.701688][T25066] ? vsprintf+0x40/0x40 [ 739.705862][T25066] device_add_disk+0x2a/0x40 [ 739.710468][T25066] loop_add+0x58f/0x760 [ 739.714677][T25066] loop_control_ioctl+0x564/0x740 [ 739.719691][T25066] ? loop_remove+0xb0/0xb0 [ 739.724098][T25066] ? __fget_files+0x310/0x370 [ 739.728763][T25066] ? security_file_ioctl+0xb1/0xd0 [ 739.733859][T25066] ? loop_remove+0xb0/0xb0 [ 739.738275][T25066] __se_sys_ioctl+0x115/0x190 [ 739.742946][T25066] __x64_sys_ioctl+0x7b/0x90 [ 739.747532][T25066] do_syscall_64+0x34/0x70 [ 739.751937][T25066] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 739.757811][T25066] RIP: 0033:0x7fb457f980f9 [ 739.762212][T25066] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 739.781810][T25066] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 739.790215][T25066] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 739.798196][T25066] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 739.806155][T25066] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 739.814113][T25066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 21:23:43 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 43) [ 739.822075][T25066] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 739.861778][T25069] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 739.877905][T25086] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 739.886513][T25069] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 739.894998][T25086] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 739.902602][T25069] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 739.915034][T25092] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 739.925754][T25086] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 740.043184][T25107] FAULT_INJECTION: forcing a failure. [ 740.043184][T25107] name failslab, interval 1, probability 0, space 0, times 0 [ 740.055909][T25107] CPU: 0 PID: 25107 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 740.067603][T25107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 740.077639][T25107] Call Trace: [ 740.080926][T25107] dump_stack_lvl+0x1e2/0x24b [ 740.085580][T25107] ? panic+0x7d7/0x7d7 [ 740.089641][T25107] ? bfq_pos_tree_add_move+0x43e/0x43e [ 740.095089][T25107] dump_stack+0x15/0x17 [ 740.099247][T25107] should_fail+0x3c0/0x510 [ 740.103645][T25107] __should_failslab+0x9f/0xe0 [ 740.108405][T25107] should_failslab+0x9/0x20 [ 740.112886][T25107] kmem_cache_alloc+0x3f/0x300 [ 740.117628][T25107] ? __kernfs_new_node+0xdb/0x6e0 [ 740.122630][T25107] ? mutex_lock+0xb2/0x1e0 [ 740.127024][T25107] __kernfs_new_node+0xdb/0x6e0 [ 740.131863][T25107] ? kernfs_new_node+0x170/0x170 [ 740.136787][T25107] ? kernfs_add_one+0x4c5/0x5e0 [ 740.141635][T25107] ? kernfs_create_dir_ns+0x1eb/0x230 [ 740.147000][T25107] kernfs_new_node+0x97/0x170 [ 740.151668][T25107] __kernfs_create_file+0x4a/0x270 [ 740.156782][T25107] sysfs_add_file_mode_ns+0x273/0x320 [ 740.162160][T25107] sysfs_create_file_ns+0x191/0x2a0 [ 740.167355][T25107] ? sysfs_add_file_mode_ns+0x320/0x320 [ 740.172897][T25107] ? __kasan_check_write+0x14/0x20 [ 740.177990][T25107] ? __up_read+0x29/0x1c0 [ 740.182300][T25107] device_create_file+0x110/0x1d0 [ 740.187302][T25107] device_add+0x496/0xbd0 [ 740.191711][T25107] device_create+0x258/0x2e0 [ 740.196291][T25107] ? root_device_unregister+0x80/0x80 [ 740.201651][T25107] ? number+0xd9b/0x1040 [ 740.205882][T25107] bdi_register_va+0x94/0x600 [ 740.210559][T25107] bdi_register+0xd1/0x120 [ 740.214992][T25107] ? __device_add_disk+0x536/0x11d0 [ 740.220175][T25107] ? bdi_register_va+0x600/0x600 [ 740.225098][T25107] ? vsnprintf+0x1bfd/0x1cd0 [ 740.229805][T25107] ? __kasan_check_read+0x11/0x20 [ 740.234826][T25107] ? blk_alloc_devt+0xd4/0x320 [ 740.239589][T25107] __device_add_disk+0x5cb/0x11d0 [ 740.244604][T25107] ? device_add_disk+0x40/0x40 [ 740.249359][T25107] ? loop_add+0x400/0x760 [ 740.253697][T25107] ? vsprintf+0x40/0x40 [ 740.257844][T25107] device_add_disk+0x2a/0x40 [ 740.262422][T25107] loop_add+0x58f/0x760 [ 740.266566][T25107] loop_control_ioctl+0x564/0x740 [ 740.271579][T25107] ? loop_remove+0xb0/0xb0 [ 740.275985][T25107] ? __fget_files+0x310/0x370 [ 740.280649][T25107] ? security_file_ioctl+0xb1/0xd0 [ 740.285757][T25107] ? loop_remove+0xb0/0xb0 [ 740.290175][T25107] __se_sys_ioctl+0x115/0x190 [ 740.294843][T25107] __x64_sys_ioctl+0x7b/0x90 [ 740.299430][T25107] do_syscall_64+0x34/0x70 [ 740.303836][T25107] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 740.309712][T25107] RIP: 0033:0x7fb457f980f9 [ 740.314240][T25107] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 740.333834][T25107] RSP: 002b:00007fb456cea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 740.342255][T25107] RAX: ffffffffffffffda RBX: 00007fb4580b8050 RCX: 00007fb457f980f9 [ 740.350227][T25107] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 740.358191][T25107] RBP: 00007fb456cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 740.366147][T25107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 740.374104][T25107] R13: 00007ffeb359550f R14: 00007fb456cea300 R15: 0000000000022000 [ 740.385454][T25107] ------------[ cut here ]------------ [ 740.391020][T25107] WARNING: CPU: 0 PID: 25107 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 740.400226][T25107] Modules linked in: [ 740.404246][T25107] CPU: 1 PID: 25107 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 740.416149][T25107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 740.426422][T25107] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 740.432347][T25107] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 740.452218][T25107] RSP: 0018:ffffc9000a657bc0 EFLAGS: 00010287 [ 740.458302][T25107] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 740.466446][T25107] RDX: ffffc9000173e000 RSI: 00000000000278fe RDI: 00000000000278ff [ 740.474519][T25107] RBP: ffffc9000a657d08 R08: ffffffff82412a76 R09: ffffc9000a657610 [ 740.482620][T25107] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 740.490613][T25107] R13: ffff888114eb7000 R14: ffff888114eb5338 R15: ffff888114eb5000 [ 740.498710][T25107] FS: 00007fb456cea700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 740.507781][T25107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 740.514467][T25107] CR2: 0000001b33021000 CR3: 000000010f1f6000 CR4: 00000000003506a0 [ 740.522714][T25107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 740.530704][T25107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 740.538770][T25107] Call Trace: [ 740.542063][T25107] ? device_add_disk+0x40/0x40 [ 740.546940][T25107] ? loop_add+0x400/0x760 [ 740.551276][T25107] ? vsprintf+0x40/0x40 [ 740.555563][T25107] device_add_disk+0x2a/0x40 [ 740.560164][T25107] loop_add+0x58f/0x760 [ 740.564437][T25107] loop_control_ioctl+0x564/0x740 [ 740.569492][T25107] ? loop_remove+0xb0/0xb0 [ 740.574029][T25107] ? __fget_files+0x310/0x370 [ 740.578718][T25107] ? security_file_ioctl+0xb1/0xd0 [ 740.583890][T25107] ? loop_remove+0xb0/0xb0 [ 740.588327][T25107] __se_sys_ioctl+0x115/0x190 [ 740.593029][T25107] __x64_sys_ioctl+0x7b/0x90 [ 740.597751][T25107] do_syscall_64+0x34/0x70 [ 740.602198][T25107] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 740.608103][T25107] RIP: 0033:0x7fb457f980f9 [ 740.612587][T25107] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 740.632304][T25107] RSP: 002b:00007fb456cea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:23:44 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, @loopback, @empty}}) 21:23:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:44 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='schedstat\x00') sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x20008004) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:44 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") [ 740.640712][T25107] RAX: ffffffffffffffda RBX: 00007fb4580b8050 RCX: 00007fb457f980f9 [ 740.648715][T25107] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 740.656716][T25107] RBP: 00007fb456cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 740.664707][T25107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 740.672693][T25107] R13: 00007ffeb359550f R14: 00007fb456cea300 R15: 0000000000022000 [ 740.680653][T25107] ---[ end trace e057be27904f751d ]--- 21:23:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, @loopback, @empty}}) 21:23:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:44 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 44) 21:23:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x0, @loopback, @empty}}) 21:23:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xd000000, 0x0, @loopback, @empty}}) 21:23:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xe000000, 0x0, @loopback, @empty}}) [ 740.756415][T25116] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 740.771461][T25116] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 740.797298][T25116] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 740.809342][T25121] FAULT_INJECTION: forcing a failure. [ 740.809342][T25121] name failslab, interval 1, probability 0, space 0, times 0 [ 740.822177][T25121] CPU: 1 PID: 25121 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 740.833912][T25121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 740.843973][T25121] Call Trace: [ 740.847260][T25121] dump_stack_lvl+0x1e2/0x24b [ 740.851936][T25121] ? panic+0x7d7/0x7d7 [ 740.856097][T25121] ? bfq_pos_tree_add_move+0x43e/0x43e [ 740.861547][T25121] ? selinux_kernfs_init_security+0x1a8/0x760 [ 740.867610][T25121] ? ___slab_alloc+0xa9/0x2e0 [ 740.872278][T25121] dump_stack+0x15/0x17 [ 740.876477][T25121] should_fail+0x3c0/0x510 [ 740.880904][T25121] __should_failslab+0x9f/0xe0 [ 740.885661][T25121] should_failslab+0x9/0x20 [ 740.890150][T25121] kmem_cache_alloc+0x3f/0x300 [ 740.894907][T25121] ? __kernfs_new_node+0xdb/0x6e0 [ 740.899946][T25121] __kernfs_new_node+0xdb/0x6e0 [ 740.904803][T25121] ? kernfs_new_node+0x170/0x170 [ 740.909740][T25121] ? __kasan_check_write+0x14/0x20 [ 740.914864][T25121] ? __kasan_check_write+0x14/0x20 [ 740.919962][T25121] ? mutex_unlock+0x29/0xf0 [ 740.924477][T25121] ? kernfs_activate+0x409/0x420 [ 740.929445][T25121] kernfs_new_node+0x97/0x170 [ 740.934121][T25121] kernfs_create_link+0xb8/0x210 [ 740.939054][T25121] sysfs_do_create_link_sd+0x89/0x110 [ 740.944442][T25121] sysfs_create_link+0x68/0x80 [ 740.949222][T25121] device_add_class_symlinks+0x222/0x2a0 [ 740.954849][T25121] device_add+0x4c3/0xbd0 [ 740.959177][T25121] device_create+0x258/0x2e0 [ 740.963755][T25121] ? root_device_unregister+0x80/0x80 [ 740.969130][T25121] ? number+0xd9b/0x1040 [ 740.973360][T25121] bdi_register_va+0x94/0x600 [ 740.978025][T25121] bdi_register+0xd1/0x120 [ 740.982460][T25121] ? __device_add_disk+0x536/0x11d0 [ 740.987642][T25121] ? bdi_register_va+0x600/0x600 [ 740.992740][T25121] ? vsnprintf+0x1bfd/0x1cd0 [ 740.997318][T25121] ? __kasan_check_read+0x11/0x20 [ 741.002330][T25121] ? blk_alloc_devt+0xd4/0x320 [ 741.007082][T25121] __device_add_disk+0x5cb/0x11d0 [ 741.012106][T25121] ? device_add_disk+0x40/0x40 [ 741.016863][T25121] ? loop_add+0x400/0x760 [ 741.021179][T25121] ? vsprintf+0x40/0x40 [ 741.025381][T25121] device_add_disk+0x2a/0x40 [ 741.030043][T25121] loop_add+0x58f/0x760 [ 741.034192][T25121] loop_control_ioctl+0x564/0x740 [ 741.039212][T25121] ? loop_remove+0xb0/0xb0 [ 741.043639][T25121] ? __fget_files+0x310/0x370 [ 741.048309][T25121] ? security_file_ioctl+0xb1/0xd0 [ 741.053438][T25121] ? loop_remove+0xb0/0xb0 [ 741.057850][T25121] __se_sys_ioctl+0x115/0x190 [ 741.062539][T25121] __x64_sys_ioctl+0x7b/0x90 [ 741.067122][T25121] do_syscall_64+0x34/0x70 [ 741.071529][T25121] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 741.077408][T25121] RIP: 0033:0x7fb457f980f9 [ 741.081809][T25121] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 741.101428][T25121] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.109853][T25121] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 741.117811][T25121] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 741.125882][T25121] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 741.133844][T25121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 741.141818][T25121] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 741.150936][T25121] ------------[ cut here ]------------ [ 741.157750][T25121] WARNING: CPU: 0 PID: 25121 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 741.167119][T25121] Modules linked in: [ 741.171136][T25121] CPU: 0 PID: 25121 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 741.183064][T25121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 741.193280][T25121] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 741.199178][T25121] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 741.219062][T25121] RSP: 0018:ffffc9000a8ffbc0 EFLAGS: 00010287 [ 741.225219][T25121] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 741.233396][T25121] RDX: ffffc9000153d000 RSI: 00000000000288c9 RDI: 00000000000288ca [ 741.241406][T25121] RBP: ffffc9000a8ffd08 R08: ffffffff82412a76 R09: ffffc9000a8ff610 [ 741.249551][T25121] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 741.257640][T25121] R13: ffff88810c37e000 R14: ffff88815be85338 R15: ffff88815be85000 [ 741.265873][T25121] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 741.275095][T25121] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 741.281745][T25121] CR2: 0000555556cc6728 CR3: 000000010ca31000 CR4: 00000000003506a0 [ 741.290024][T25121] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 741.298183][T25121] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 741.306526][T25121] Call Trace: [ 741.309876][T25121] ? device_add_disk+0x40/0x40 [ 741.314908][T25121] ? loop_add+0x400/0x760 [ 741.319299][T25121] ? vsprintf+0x40/0x40 [ 741.323711][T25121] device_add_disk+0x2a/0x40 [ 741.328378][T25121] loop_add+0x58f/0x760 [ 741.332691][T25121] loop_control_ioctl+0x564/0x740 [ 741.337770][T25121] ? loop_remove+0xb0/0xb0 [ 741.342278][T25121] ? __fget_files+0x310/0x370 [ 741.347024][T25121] ? security_file_ioctl+0xb1/0xd0 [ 741.352206][T25121] ? loop_remove+0xb0/0xb0 [ 741.356660][T25121] __se_sys_ioctl+0x115/0x190 [ 741.361370][T25121] __x64_sys_ioctl+0x7b/0x90 [ 741.366034][T25121] do_syscall_64+0x34/0x70 [ 741.370490][T25121] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 741.376454][T25121] RIP: 0033:0x7fb457f980f9 [ 741.380916][T25121] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 741.400733][T25121] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.409222][T25121] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 741.417527][T25121] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 741.425724][T25121] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 741.433849][T25121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 741.441878][T25121] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 741.449934][T25121] ---[ end trace e057be27904f751e ]--- [ 741.465762][T25120] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 741.478456][T25120] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 741.491336][T25120] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 21:23:45 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:45 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='schedstat\x00') (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='schedstat\x00') sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x20008004) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:45 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @loopback, @empty}}) 21:23:45 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 45) 21:23:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x2900, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0, @loopback, @empty}}) 21:23:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, @loopback, @empty}}) [ 741.607783][T25142] FAULT_INJECTION: forcing a failure. [ 741.607783][T25142] name failslab, interval 1, probability 0, space 0, times 0 [ 741.620586][T25142] CPU: 1 PID: 25142 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 741.632351][T25142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 741.642392][T25142] Call Trace: [ 741.645668][T25142] dump_stack_lvl+0x1e2/0x24b [ 741.650323][T25142] ? panic+0x7d7/0x7d7 [ 741.654379][T25142] ? bfq_pos_tree_add_move+0x43e/0x43e [ 741.659823][T25142] dump_stack+0x15/0x17 [ 741.663965][T25142] should_fail+0x3c0/0x510 [ 741.668376][T25142] __should_failslab+0x9f/0xe0 [ 741.673122][T25142] should_failslab+0x9/0x20 [ 741.677608][T25142] kmem_cache_alloc+0x3f/0x300 [ 741.682356][T25142] ? __kernfs_new_node+0xdb/0x6e0 [ 741.687361][T25142] __kernfs_new_node+0xdb/0x6e0 [ 741.692195][T25142] ? kernfs_new_node+0x170/0x170 [ 741.697129][T25142] ? __kasan_check_write+0x14/0x20 [ 741.702227][T25142] ? _raw_spin_lock+0xa3/0x1b0 [ 741.706977][T25142] ? __radix_tree_preload+0x361/0x3e0 [ 741.712343][T25142] kernfs_new_node+0x97/0x170 [ 741.717013][T25142] __kernfs_create_file+0x4a/0x270 [ 741.722120][T25142] sysfs_add_file_mode_ns+0x273/0x320 [ 741.727477][T25142] internal_create_group+0x55e/0xf50 [ 741.732750][T25142] ? sysfs_create_group+0x30/0x30 [ 741.737761][T25142] ? kernfs_put+0x48/0x540 [ 741.742159][T25142] ? kernfs_create_link+0x1a0/0x210 [ 741.747357][T25142] sysfs_create_groups+0x5d/0x130 [ 741.752368][T25142] device_add_attrs+0x8b/0x3e0 [ 741.757135][T25142] ? device_add_class_symlinks+0x27c/0x2a0 [ 741.763094][T25142] device_add+0x4e6/0xbd0 [ 741.767411][T25142] device_create+0x258/0x2e0 [ 741.771990][T25142] ? root_device_unregister+0x80/0x80 [ 741.777361][T25142] ? number+0xd9b/0x1040 [ 741.781590][T25142] bdi_register_va+0x94/0x600 [ 741.786260][T25142] bdi_register+0xd1/0x120 [ 741.790683][T25142] ? __device_add_disk+0x536/0x11d0 [ 741.795878][T25142] ? bdi_register_va+0x600/0x600 [ 741.800825][T25142] ? vsnprintf+0x1bfd/0x1cd0 [ 741.805407][T25142] ? __kasan_check_read+0x11/0x20 [ 741.810437][T25142] ? blk_alloc_devt+0xd4/0x320 [ 741.815204][T25142] __device_add_disk+0x5cb/0x11d0 [ 741.820396][T25142] ? device_add_disk+0x40/0x40 [ 741.825165][T25142] ? loop_add+0x400/0x760 [ 741.829491][T25142] ? vsprintf+0x40/0x40 [ 741.833634][T25142] device_add_disk+0x2a/0x40 [ 741.838229][T25142] loop_add+0x58f/0x760 [ 741.842376][T25142] loop_control_ioctl+0x564/0x740 [ 741.847385][T25142] ? loop_remove+0xb0/0xb0 [ 741.851784][T25142] ? __fget_files+0x310/0x370 [ 741.856465][T25142] ? security_file_ioctl+0xb1/0xd0 [ 741.861572][T25142] ? loop_remove+0xb0/0xb0 [ 741.865975][T25142] __se_sys_ioctl+0x115/0x190 [ 741.870638][T25142] __x64_sys_ioctl+0x7b/0x90 [ 741.875211][T25142] do_syscall_64+0x34/0x70 [ 741.879624][T25142] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 741.885596][T25142] RIP: 0033:0x7fb457f980f9 21:23:45 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 741.890019][T25142] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 741.909643][T25142] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.918052][T25142] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 741.926013][T25142] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 741.933970][T25142] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 741.941926][T25142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 741.949896][T25142] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 741.963870][T25142] ------------[ cut here ]------------ [ 741.969478][T25142] WARNING: CPU: 0 PID: 25142 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 741.979568][T25142] Modules linked in: [ 741.983736][T25142] CPU: 0 PID: 25142 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 741.995797][T25142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 742.006108][T25142] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 742.011978][T25142] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 742.031883][T25142] RSP: 0018:ffffc9000aacfbc0 EFLAGS: 00010283 [ 742.038229][T25142] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 742.046491][T25142] RDX: ffffc9000153d000 RSI: 0000000000029aac RDI: 0000000000029aad [ 742.054734][T25142] RBP: ffffc9000aacfd08 R08: ffffffff82412a76 R09: ffffc9000aacf610 [ 742.062986][T25142] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 742.071075][T25142] R13: ffff88811d27b000 R14: ffff88811d27a338 R15: ffff88811d27a000 [ 742.079387][T25142] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 742.088622][T25142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 742.095499][T25142] CR2: 0000000020020000 CR3: 000000011508c000 CR4: 00000000003506a0 [ 742.103762][T25142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 742.111850][T25142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 742.120296][T25142] Call Trace: [ 742.123906][T25142] ? device_add_disk+0x40/0x40 [ 742.128773][T25142] ? loop_add+0x400/0x760 [ 742.133436][T25142] ? vsprintf+0x40/0x40 [ 742.137705][T25142] device_add_disk+0x2a/0x40 [ 742.142712][T25142] loop_add+0x58f/0x760 [ 742.146976][T25142] loop_control_ioctl+0x564/0x740 [ 742.152361][T25142] ? loop_remove+0xb0/0xb0 [ 742.156889][T25142] ? __fget_files+0x310/0x370 [ 742.161665][T25142] ? security_file_ioctl+0xb1/0xd0 [ 742.167151][T25142] ? loop_remove+0xb0/0xb0 [ 742.171671][T25142] __se_sys_ioctl+0x115/0x190 [ 742.176644][T25142] __x64_sys_ioctl+0x7b/0x90 [ 742.181354][T25142] do_syscall_64+0x34/0x70 [ 742.186087][T25142] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 742.192088][T25142] RIP: 0033:0x7fb457f980f9 [ 742.196836][T25142] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 742.216711][T25142] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 742.225410][T25142] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 742.233640][T25142] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 742.241713][T25142] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 742.250009][T25142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 21:23:46 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 46) [ 742.258325][T25142] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 742.266528][T25142] ---[ end trace e057be27904f751f ]--- 21:23:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 742.313501][T25149] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 742.325939][T25143] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 742.347035][T25149] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 742.360040][T25143] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 742.372570][T25143] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 742.381479][T25149] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 742.404007][T25165] FAULT_INJECTION: forcing a failure. [ 742.404007][T25165] name failslab, interval 1, probability 0, space 0, times 0 [ 742.416711][T25165] CPU: 1 PID: 25165 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 742.428414][T25165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 742.438462][T25165] Call Trace: [ 742.441777][T25165] dump_stack_lvl+0x1e2/0x24b [ 742.446447][T25165] ? panic+0x7d7/0x7d7 [ 742.450531][T25165] ? bfq_pos_tree_add_move+0x43e/0x43e [ 742.455973][T25165] dump_stack+0x15/0x17 [ 742.460111][T25165] should_fail+0x3c0/0x510 [ 742.464530][T25165] __should_failslab+0x9f/0xe0 [ 742.469312][T25165] should_failslab+0x9/0x20 [ 742.473802][T25165] kmem_cache_alloc+0x3f/0x300 [ 742.478560][T25165] ? __kernfs_new_node+0xdb/0x6e0 [ 742.483568][T25165] __kernfs_new_node+0xdb/0x6e0 [ 742.488403][T25165] ? kernfs_new_node+0x170/0x170 [ 742.493329][T25165] ? __kasan_check_write+0x14/0x20 [ 742.498429][T25165] ? _raw_spin_lock+0xa3/0x1b0 [ 742.503179][T25165] ? __radix_tree_preload+0x361/0x3e0 [ 742.508556][T25165] kernfs_new_node+0x97/0x170 [ 742.513219][T25165] __kernfs_create_file+0x4a/0x270 [ 742.518314][T25165] sysfs_add_file_mode_ns+0x273/0x320 [ 742.523670][T25165] internal_create_group+0x55e/0xf50 [ 742.528939][T25165] ? sysfs_create_group+0x30/0x30 [ 742.533943][T25165] ? kernfs_put+0x48/0x540 [ 742.538342][T25165] ? kernfs_create_link+0x1a0/0x210 [ 742.543522][T25165] sysfs_create_groups+0x5d/0x130 [ 742.548546][T25165] device_add_attrs+0x8b/0x3e0 [ 742.553295][T25165] ? device_add_class_symlinks+0x27c/0x2a0 [ 742.559083][T25165] device_add+0x4e6/0xbd0 [ 742.563398][T25165] device_create+0x258/0x2e0 [ 742.567974][T25165] ? root_device_unregister+0x80/0x80 [ 742.573332][T25165] ? number+0xd9b/0x1040 [ 742.577670][T25165] bdi_register_va+0x94/0x600 [ 742.582334][T25165] bdi_register+0xd1/0x120 [ 742.586745][T25165] ? __device_add_disk+0x536/0x11d0 [ 742.591924][T25165] ? bdi_register_va+0x600/0x600 [ 742.596842][T25165] ? vsnprintf+0x1bfd/0x1cd0 [ 742.601427][T25165] ? __kasan_check_read+0x11/0x20 [ 742.606450][T25165] ? blk_alloc_devt+0xd4/0x320 [ 742.611209][T25165] __device_add_disk+0x5cb/0x11d0 [ 742.616236][T25165] ? device_add_disk+0x40/0x40 [ 742.621004][T25165] ? loop_add+0x400/0x760 [ 742.625343][T25165] ? vsprintf+0x40/0x40 [ 742.629484][T25165] device_add_disk+0x2a/0x40 [ 742.634059][T25165] loop_add+0x58f/0x760 [ 742.638204][T25165] loop_control_ioctl+0x564/0x740 [ 742.643263][T25165] ? loop_remove+0xb0/0xb0 [ 742.647670][T25165] ? __fget_files+0x310/0x370 [ 742.652350][T25165] ? security_file_ioctl+0xb1/0xd0 [ 742.657456][T25165] ? loop_remove+0xb0/0xb0 [ 742.661884][T25165] __se_sys_ioctl+0x115/0x190 [ 742.666546][T25165] __x64_sys_ioctl+0x7b/0x90 [ 742.671124][T25165] do_syscall_64+0x34/0x70 [ 742.675528][T25165] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 742.681407][T25165] RIP: 0033:0x7fb457f980f9 [ 742.685824][T25165] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 742.705494][T25165] RSP: 002b:00007fb456cea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 742.713920][T25165] RAX: ffffffffffffffda RBX: 00007fb4580b8050 RCX: 00007fb457f980f9 [ 742.721886][T25165] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 742.729846][T25165] RBP: 00007fb456cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 742.737808][T25165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 742.745931][T25165] R13: 00007ffeb359550f R14: 00007fb456cea300 R15: 0000000000022000 [ 742.754967][T25165] ------------[ cut here ]------------ [ 742.760479][T25165] WARNING: CPU: 1 PID: 25165 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 742.769607][T25165] Modules linked in: [ 742.773581][T25165] CPU: 1 PID: 25165 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 742.785344][T25165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 742.795591][T25165] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 742.801403][T25165] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 742.821199][T25165] RSP: 0018:ffffc9000aaa7bc0 EFLAGS: 00010287 [ 742.827396][T25165] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 742.835501][T25165] RDX: ffffc9000173e000 RSI: 00000000000297a4 RDI: 00000000000297a5 [ 742.843582][T25165] RBP: ffffc9000aaa7d08 R08: ffffffff82412a76 R09: ffffc9000aaa7610 [ 742.851543][T25165] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 742.859660][T25165] R13: ffff88815cd7b000 R14: ffff88815cd7d338 R15: ffff88815cd7d000 [ 742.867831][T25165] FS: 00007fb456cea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 742.876856][T25165] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 742.883548][T25165] CR2: 0000001b33021000 CR3: 0000000116cf7000 CR4: 00000000003506b0 [ 742.891519][T25165] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 742.899641][T25165] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 742.907724][T25165] Call Trace: [ 742.911031][T25165] ? device_add_disk+0x40/0x40 [ 742.915931][T25165] ? loop_add+0x400/0x760 [ 742.920251][T25165] ? vsprintf+0x40/0x40 [ 742.924525][T25165] device_add_disk+0x2a/0x40 [ 742.929105][T25165] loop_add+0x58f/0x760 [ 742.933471][T25165] loop_control_ioctl+0x564/0x740 [ 742.938497][T25165] ? loop_remove+0xb0/0xb0 [ 742.943050][T25165] ? __fget_files+0x310/0x370 [ 742.947784][T25165] ? security_file_ioctl+0xb1/0xd0 [ 742.952992][T25165] ? loop_remove+0xb0/0xb0 [ 742.957464][T25165] __se_sys_ioctl+0x115/0x190 [ 742.962229][T25165] __x64_sys_ioctl+0x7b/0x90 [ 742.966873][T25165] do_syscall_64+0x34/0x70 [ 742.971339][T25165] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 742.977310][T25165] RIP: 0033:0x7fb457f980f9 [ 742.981880][T25165] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 743.001549][T25165] RSP: 002b:00007fb456cea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 743.010038][T25165] RAX: ffffffffffffffda RBX: 00007fb4580b8050 RCX: 00007fb457f980f9 [ 743.018147][T25165] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 743.026221][T25165] RBP: 00007fb456cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 743.034294][T25165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 743.042383][T25165] R13: 00007ffeb359550f R14: 00007fb456cea300 R15: 0000000000022000 [ 743.050428][T25165] ---[ end trace e057be27904f7520 ]--- 21:23:47 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @loopback, @empty}}) 21:23:47 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='schedstat\x00') sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x20008004) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:47 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 47) 21:23:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:47 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs271vHEUbAPBn7+zkTZy8NiF8xAlgBAiLDzt2AqSgAAQSBUhIUITS2E5kcolRbCQSWWAoQgmR6BElEn8BFTQIqJBooUeRIuQmgYZDe7drny93xmeffYH9/aRNZnbnNPPs7NzN7ngDKKyR9J8k4kBE/BIRg/Xs+gIj9f9urixN/7GyNJ1Etfr670mt3I2Vpem8aP65gTyzXM8fbVHvwqXL56YqldmLWX588fw74wuXLj85d37q7OzZ2QuTp06dPDHxzNOTT3UlzjSuG8Pvzx878vKbV1+dPn31rR++SvL4m+LokpGNDj7S5cp67WBDOunrYUPoSDki0u7qr43/wSjHWucNxksf9bRxwI6qVqvVve0PL1eB/7Aket0CYPf9Va1W8x/69P4333Zp6nFbuP58/QYojftmttWP9EUpK9PfdH/bTSMRcXr5z8/TLXbmOQQAwDrfpPOfJ1rN/0pxd0O5/2drKEMRcUdEHIqIOyPicETcFVEre09E3Nth/c2LJLfOf0rXthTYJqXzv2ezta3187989hdD5Sx3sBZ/f3JmrjJ7PDsno9G/N81PbFDHty/+/Em7Y43zv3RL68/nglk7rvU1PaCbmVqc2k7Mja5/GDHc1yr+ZHUlIImIIxExvMU65h778li7Y/8c/wa6sM5U/SLi0Xr/L0dT/Llk4/XJ8f9FZfb4eH5V3OrHn6681q7+bcXfBWn/7295/a/GP5Q0rtcudF7HlV8/bntPs9Xrf0/yRi29J9v33tTi4sWJiD3JK9n+59b2T659Ns/n5dP4Rx9qPf4PxdqZOBoR6UV8X0TcHxEPZG1/MCIGPt04/u9fePjtrce/s9L4Zzrq/84T5XPffb2u0qFO4k/7/2QtNZrt2cz332YbuN3zBwAAAP8GpYg4EElpbDVdKo2N1f+G/3DsL1XmFxYfPzP/7oWZ+jsCQ9Ffyp90DTY8D53Ibuvz/GRT/kT23Piz8r5afmx6vjLT6+Ch4AbajP/Ub+Vetw7Ycd7XguIy/qG4jH8oLuMfiqvF+N/Xi3YAu6/V7/8HPWgHsPvM/6G4jH8oLuMfisv4h0Laznv9EkVOROm2aIbEDiV6/c0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHX8HAAD//1K25vE=") 21:23:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x29000000, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @loopback, @empty}}) 21:23:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:47 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs289PHFUcAPDv7EJrSytY64/Sqhg1En9AoVV78KBGEw+amOihHhFog90WUzCxDVH0UI/axLvxaOJf4EkvRj2ZeNW7adIYLq2e1szuDCzbXWRhYavz+STDvjfzNu99983bfTOPCaCwRtI/ScSBiPgtIgbr2fUFRuovN1eWpv9aWZpOolp988+kVu7GytJ0XjR/30CeWa7nj7aod+HS5XNTlcrsxSw/vnj+vfGFS5efnjs/dXb27OyFyVOnTp6YeO7ZyWe6Emca143hD+ePHXn17auvT5+++s5P3yR5/E1xdMnIRgcf63JlvXawIZ309bAhdKQcEWl39dfG/2CUY63zBuOVT3raOGBHVavV6t72h5erwP9YEr1uAdAb+Q99ev2bb7s09bgtXH+x/prGfTPb6nv6opSV6W+6vu2mkYg4vfz3l+kWO3MfAgBgne/S+c9TreZ/pbi3odyd2RrKUETcFRGHIuLuiDgcEfdE1MreFxH3d1h/8yLJrfOf0rUtBbZJ6fzv+Wxta/38L5/9xVA5yx2sxd+fnJmrzB7PPpPR6N+b5ic2qOP7l3/9rN2xxvlfuqX153PBrB3X+ppu0M1MLU5tJ+ZG1z+OGO5rFX+yuhKQRMSRiBjeYh1zT3x9rN2xf49/A11YZ6p+FfF4vf+Xoyn+XLLx+uT4HVGZPT6enxW3+vmXK2+0q39b8XdB2v/7W57/q/EPJY3rtQud13Hl90/bXtNs9fzfk7xVS+/J9n0wtbh4cSJiT/Jatv+Ftf2Ta+/N83n5NP7RR1qP/0Ox9kkcjYj0JH4gIh6MiIeytj8cEQOfbxz/jy89+u7W499ZafwzHfV/54nyuR++XVfpUCfxp/1/spYazfZs5vtvsw3c7ucHAAAA/wWliDgQSWlsNV0qjY3V/4f/cOwvVeYXFp88M//+hZn6MwJD0V/K73QNNtwPncgu6/P8ZFP+RHbf+Ivyvlp+bHq+MtPr4KHgBtqM/9Qf5V63DthxnteC4jL+obiMfygu4x+Kq8X439eLdgC7r9Xv/0c9aAew+8z/obiMfygu4x+Ky/iHQtrOc/0SRU5E6bZohsQOJXr9zQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAd/wQAAP//khrm7g==") 21:23:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @loopback, @empty}}) 21:23:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @loopback, @empty}}) [ 743.191659][T25178] FAULT_INJECTION: forcing a failure. [ 743.191659][T25178] name failslab, interval 1, probability 0, space 0, times 0 [ 743.204593][T25178] CPU: 0 PID: 25178 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 743.216317][T25178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 743.226379][T25178] Call Trace: [ 743.229679][T25178] dump_stack_lvl+0x1e2/0x24b [ 743.234352][T25178] ? panic+0x7d7/0x7d7 [ 743.238532][T25178] ? bfq_pos_tree_add_move+0x43e/0x43e [ 743.243979][T25178] ? selinux_kernfs_init_security+0x1a8/0x760 [ 743.250029][T25178] dump_stack+0x15/0x17 [ 743.254172][T25178] should_fail+0x3c0/0x510 [ 743.258574][T25178] __should_failslab+0x9f/0xe0 [ 743.263322][T25178] should_failslab+0x9/0x20 [ 743.267825][T25178] kmem_cache_alloc+0x3f/0x300 [ 743.272571][T25178] ? __kernfs_new_node+0xdb/0x6e0 [ 743.277576][T25178] __kernfs_new_node+0xdb/0x6e0 [ 743.282410][T25178] ? __kasan_check_write+0x14/0x20 [ 743.287502][T25178] ? mutex_lock+0xb2/0x1e0 [ 743.291900][T25178] ? mutex_trylock+0x180/0x180 [ 743.296654][T25178] ? kernfs_new_node+0x170/0x170 [ 743.301583][T25178] ? __kasan_check_write+0x14/0x20 [ 743.306691][T25178] ? mutex_unlock+0x29/0xf0 [ 743.311178][T25178] ? kernfs_activate+0x409/0x420 [ 743.316196][T25178] kernfs_new_node+0x97/0x170 [ 743.320867][T25178] __kernfs_create_file+0x4a/0x270 [ 743.326008][T25178] sysfs_add_file_mode_ns+0x273/0x320 [ 743.331362][T25178] internal_create_group+0x55e/0xf50 [ 743.336628][T25178] ? sysfs_create_group+0x30/0x30 [ 743.341726][T25178] ? kernfs_put+0x48/0x540 [ 743.346126][T25178] ? kernfs_create_link+0x1a0/0x210 [ 743.351308][T25178] sysfs_create_groups+0x5d/0x130 [ 743.356322][T25178] device_add_attrs+0x8b/0x3e0 [ 743.361078][T25178] ? device_add_class_symlinks+0x27c/0x2a0 [ 743.366884][T25178] device_add+0x4e6/0xbd0 [ 743.371198][T25178] device_create+0x258/0x2e0 [ 743.375777][T25178] ? root_device_unregister+0x80/0x80 [ 743.381179][T25178] ? number+0xd9b/0x1040 [ 743.385415][T25178] bdi_register_va+0x94/0x600 [ 743.390086][T25178] bdi_register+0xd1/0x120 [ 743.394496][T25178] ? __device_add_disk+0x536/0x11d0 [ 743.399867][T25178] ? bdi_register_va+0x600/0x600 [ 743.404792][T25178] ? vsnprintf+0x1bfd/0x1cd0 [ 743.409372][T25178] ? __kasan_check_read+0x11/0x20 [ 743.414391][T25178] ? blk_alloc_devt+0xd4/0x320 [ 743.419182][T25178] __device_add_disk+0x5cb/0x11d0 [ 743.424213][T25178] ? device_add_disk+0x40/0x40 [ 743.428971][T25178] ? loop_add+0x400/0x760 [ 743.433287][T25178] ? vsprintf+0x40/0x40 [ 743.437444][T25178] device_add_disk+0x2a/0x40 [ 743.442023][T25178] loop_add+0x58f/0x760 [ 743.446168][T25178] loop_control_ioctl+0x564/0x740 [ 743.451186][T25178] ? loop_remove+0xb0/0xb0 [ 743.455588][T25178] ? __fget_files+0x310/0x370 [ 743.460250][T25178] ? security_file_ioctl+0xb1/0xd0 [ 743.465344][T25178] ? loop_remove+0xb0/0xb0 [ 743.469739][T25178] __se_sys_ioctl+0x115/0x190 [ 743.474395][T25178] __x64_sys_ioctl+0x7b/0x90 [ 743.478967][T25178] do_syscall_64+0x34/0x70 [ 743.483368][T25178] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 743.489241][T25178] RIP: 0033:0x7fb457f980f9 [ 743.493637][T25178] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 743.513223][T25178] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 743.521629][T25178] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 743.529609][T25178] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 743.537601][T25178] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 743.545562][T25178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 743.553626][T25178] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 743.562475][T25178] ------------[ cut here ]------------ [ 743.568097][T25178] WARNING: CPU: 0 PID: 25178 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 743.577350][T25178] Modules linked in: [ 743.581341][T25178] CPU: 0 PID: 25178 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 743.593167][T25178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 743.603471][T25178] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 743.609422][T25178] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 743.629682][T25178] RSP: 0018:ffffc90000147bc0 EFLAGS: 00010287 [ 743.635826][T25178] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 743.643817][T25178] RDX: ffffc9000153d000 RSI: 000000000002beea RDI: 000000000002beeb [ 743.651786][T25178] RBP: ffffc90000147d08 R08: ffffffff82412a76 R09: ffffc90000147610 [ 743.659929][T25178] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 743.667948][T25178] R13: ffff88811b8dd000 R14: ffff88811b8d8338 R15: ffff88811b8d8000 [ 743.675996][T25178] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 743.684979][T25178] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 743.691577][T25178] CR2: 0000555556cc6728 CR3: 000000011635e000 CR4: 00000000003506a0 [ 743.699571][T25178] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 743.707565][T25178] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 743.715548][T25178] Call Trace: [ 743.718840][T25178] ? device_add_disk+0x40/0x40 [ 743.723638][T25178] ? loop_add+0x400/0x760 [ 743.727989][T25178] ? vsprintf+0x40/0x40 [ 743.732179][T25178] device_add_disk+0x2a/0x40 [ 743.736959][T25178] loop_add+0x58f/0x760 [ 743.741381][T25178] loop_control_ioctl+0x564/0x740 [ 743.746441][T25178] ? loop_remove+0xb0/0xb0 [ 743.750870][T25178] ? __fget_files+0x310/0x370 [ 743.755584][T25178] ? security_file_ioctl+0xb1/0xd0 [ 743.760713][T25178] ? loop_remove+0xb0/0xb0 [ 743.765161][T25178] __se_sys_ioctl+0x115/0x190 [ 743.769878][T25178] __x64_sys_ioctl+0x7b/0x90 [ 743.774513][T25178] do_syscall_64+0x34/0x70 [ 743.778948][T25178] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 743.784869][T25178] RIP: 0033:0x7fb457f980f9 [ 743.789631][T25178] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 743.809314][T25178] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 743.817945][T25178] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 743.826370][T25178] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 743.834470][T25178] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 743.842504][T25178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 743.850520][T25178] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 743.858564][T25178] ---[ end trace e057be27904f7521 ]--- [ 743.880759][T25176] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 743.897356][T25193] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 743.904016][T25176] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 743.904987][T25193] EXT4-fs (loop4): mount failed [ 743.923242][T25176] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:47 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:47 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 48) 21:23:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @loopback, @empty}}) 21:23:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:47 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:47 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0512"], 0x48}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="d400000019801905000000000000000002200000ff02ff1a0000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008", @ANYRES64=r2, @ANYRES16=r5], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0xd4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @loopback, @empty}}) 21:23:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @loopback, @empty}}) 21:23:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @loopback, @empty}}) [ 744.090525][T25203] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 744.103938][T25203] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 744.119402][T25207] FAULT_INJECTION: forcing a failure. [ 744.119402][T25207] name failslab, interval 1, probability 0, space 0, times 0 21:23:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @loopback, @empty}}) [ 744.128649][T25203] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 744.132273][T25207] CPU: 0 PID: 25207 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 744.152852][T25207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 744.162911][T25207] Call Trace: [ 744.166205][T25207] dump_stack_lvl+0x1e2/0x24b [ 744.170877][T25207] ? panic+0x7d7/0x7d7 [ 744.174939][T25207] ? bfq_pos_tree_add_move+0x43e/0x43e [ 744.180386][T25207] ? selinux_kernfs_init_security+0x1a8/0x760 [ 744.186444][T25207] dump_stack+0x15/0x17 [ 744.190596][T25207] should_fail+0x3c0/0x510 [ 744.195010][T25207] __should_failslab+0x9f/0xe0 [ 744.199766][T25207] should_failslab+0x9/0x20 [ 744.204271][T25207] kmem_cache_alloc+0x3f/0x300 [ 744.209032][T25207] ? __kernfs_new_node+0xdb/0x6e0 [ 744.214053][T25207] __kernfs_new_node+0xdb/0x6e0 [ 744.218904][T25207] ? __kasan_check_write+0x14/0x20 [ 744.224010][T25207] ? mutex_lock+0xb2/0x1e0 [ 744.228419][T25207] ? mutex_trylock+0x180/0x180 [ 744.233198][T25207] ? kernfs_new_node+0x170/0x170 [ 744.238142][T25207] ? __kasan_check_write+0x14/0x20 [ 744.243242][T25207] ? mutex_unlock+0x29/0xf0 [ 744.247743][T25207] ? kernfs_activate+0x409/0x420 [ 744.252694][T25207] kernfs_new_node+0x97/0x170 [ 744.257362][T25207] __kernfs_create_file+0x4a/0x270 [ 744.262596][T25207] sysfs_add_file_mode_ns+0x273/0x320 [ 744.267973][T25207] internal_create_group+0x55e/0xf50 [ 744.273257][T25207] ? sysfs_create_group+0x30/0x30 [ 744.278288][T25207] ? kernfs_put+0x48/0x540 [ 744.282698][T25207] ? kernfs_create_link+0x1a0/0x210 [ 744.287891][T25207] sysfs_create_groups+0x5d/0x130 [ 744.292915][T25207] device_add_attrs+0x8b/0x3e0 [ 744.297669][T25207] ? device_add_class_symlinks+0x27c/0x2a0 [ 744.303464][T25207] device_add+0x4e6/0xbd0 [ 744.307787][T25207] device_create+0x258/0x2e0 [ 744.312367][T25207] ? root_device_unregister+0x80/0x80 [ 744.317730][T25207] ? number+0xd9b/0x1040 [ 744.321964][T25207] bdi_register_va+0x94/0x600 [ 744.326628][T25207] bdi_register+0xd1/0x120 [ 744.331053][T25207] ? __device_add_disk+0x536/0x11d0 [ 744.336240][T25207] ? bdi_register_va+0x600/0x600 [ 744.341168][T25207] ? vsnprintf+0x1bfd/0x1cd0 [ 744.345749][T25207] ? __kasan_check_read+0x11/0x20 [ 744.350778][T25207] ? blk_alloc_devt+0xd4/0x320 [ 744.355529][T25207] __device_add_disk+0x5cb/0x11d0 [ 744.360543][T25207] ? device_add_disk+0x40/0x40 [ 744.365296][T25207] ? loop_add+0x400/0x760 [ 744.369618][T25207] ? vsprintf+0x40/0x40 [ 744.373760][T25207] device_add_disk+0x2a/0x40 [ 744.378335][T25207] loop_add+0x58f/0x760 [ 744.382481][T25207] loop_control_ioctl+0x564/0x740 [ 744.387495][T25207] ? loop_remove+0xb0/0xb0 [ 744.391902][T25207] ? __fget_files+0x310/0x370 [ 744.396570][T25207] ? security_file_ioctl+0xb1/0xd0 [ 744.401669][T25207] ? loop_remove+0xb0/0xb0 [ 744.406078][T25207] __se_sys_ioctl+0x115/0x190 [ 744.410740][T25207] __x64_sys_ioctl+0x7b/0x90 [ 744.415337][T25207] do_syscall_64+0x34/0x70 [ 744.419742][T25207] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 744.425624][T25207] RIP: 0033:0x7fb457f980f9 [ 744.430029][T25207] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 744.449622][T25207] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.458024][T25207] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 744.465996][T25207] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 744.473962][T25207] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.481934][T25207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 21:23:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @loopback, @empty}}) [ 744.489903][T25207] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 744.498436][T25207] ------------[ cut here ]------------ [ 744.505682][T25207] WARNING: CPU: 1 PID: 25207 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 744.514888][T25207] Modules linked in: [ 744.518864][T25207] CPU: 1 PID: 25207 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 744.530715][T25207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 744.540930][T25207] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 744.546817][T25207] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 744.566612][T25207] RSP: 0018:ffffc90006387bc0 EFLAGS: 00010246 [ 744.572855][T25207] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 744.580844][T25207] RDX: ffffc9000153d000 RSI: 000000000003ffff RDI: 0000000000040000 [ 744.589006][T25207] RBP: ffffc90006387d08 R08: ffffffff82412a76 R09: ffffc90006387610 [ 744.597028][T25207] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 744.605052][T25207] R13: ffff88811537c000 R14: ffff88811537d338 R15: ffff88811537d000 [ 744.613057][T25207] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 744.621982][T25207] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 744.628592][T25207] CR2: 0000000020000540 CR3: 00000001149d0000 CR4: 00000000003506a0 [ 744.636596][T25207] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 744.644586][T25207] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 744.652578][T25207] Call Trace: [ 744.655855][T25207] ? device_add_disk+0x40/0x40 [ 744.660617][T25207] ? loop_add+0x400/0x760 [ 744.664961][T25207] ? vsprintf+0x40/0x40 [ 744.669124][T25207] device_add_disk+0x2a/0x40 [ 744.673731][T25207] loop_add+0x58f/0x760 [ 744.677892][T25207] loop_control_ioctl+0x564/0x740 [ 744.682941][T25207] ? loop_remove+0xb0/0xb0 [ 744.687359][T25207] ? __fget_files+0x310/0x370 [ 744.692022][T25207] ? security_file_ioctl+0xb1/0xd0 [ 744.697163][T25207] ? loop_remove+0xb0/0xb0 [ 744.701584][T25207] __se_sys_ioctl+0x115/0x190 [ 744.706282][T25207] __x64_sys_ioctl+0x7b/0x90 [ 744.710903][T25207] do_syscall_64+0x34/0x70 [ 744.715367][T25207] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 744.721269][T25207] RIP: 0033:0x7fb457f980f9 [ 744.725750][T25207] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 744.745588][T25207] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.754045][T25207] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 744.762028][T25207] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 744.770025][T25207] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.778013][T25207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 744.786008][T25207] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 744.794015][T25207] ---[ end trace e057be27904f7522 ]--- [ 744.838691][T25223] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 744.851505][T25223] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 744.864164][T25223] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:48 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @loopback, @empty}}) 21:23:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2900, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:48 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 49) 21:23:48 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0512"], 0x48}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="d400000019801905000000000000000002200000ff02ff1a0000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008", @ANYRES64=r2, @ANYRES16=r5], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0xd4) (async, rerun: 32) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async, rerun: 32) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:48 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @loopback, @empty}}) 21:23:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @loopback, @empty}}) 21:23:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @loopback, @empty}}) 21:23:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, @loopback, @empty}}) 21:23:48 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, @loopback, @empty}}) [ 744.986835][T25233] FAULT_INJECTION: forcing a failure. [ 744.986835][T25233] name failslab, interval 1, probability 0, space 0, times 0 [ 744.999584][T25233] CPU: 0 PID: 25233 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 745.011586][T25233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 745.021641][T25233] Call Trace: [ 745.024922][T25233] dump_stack_lvl+0x1e2/0x24b [ 745.029582][T25233] ? panic+0x7d7/0x7d7 [ 745.033647][T25233] ? bfq_pos_tree_add_move+0x43e/0x43e [ 745.039145][T25233] ? selinux_kernfs_init_security+0x1a8/0x760 [ 745.045210][T25233] dump_stack+0x15/0x17 [ 745.049364][T25233] should_fail+0x3c0/0x510 [ 745.053767][T25233] __should_failslab+0x9f/0xe0 [ 745.058520][T25233] should_failslab+0x9/0x20 [ 745.063004][T25233] kmem_cache_alloc+0x3f/0x300 [ 745.067751][T25233] ? __kernfs_new_node+0xdb/0x6e0 [ 745.072761][T25233] __kernfs_new_node+0xdb/0x6e0 [ 745.077603][T25233] ? __kasan_check_write+0x14/0x20 [ 745.082698][T25233] ? mutex_lock+0xb2/0x1e0 [ 745.087107][T25233] ? mutex_trylock+0x180/0x180 [ 745.091867][T25233] ? kernfs_new_node+0x170/0x170 [ 745.096813][T25233] ? __kasan_check_write+0x14/0x20 [ 745.101919][T25233] ? mutex_unlock+0x29/0xf0 [ 745.106420][T25233] ? kernfs_activate+0x409/0x420 [ 745.111345][T25233] kernfs_new_node+0x97/0x170 [ 745.116008][T25233] __kernfs_create_file+0x4a/0x270 [ 745.121118][T25233] sysfs_add_file_mode_ns+0x273/0x320 [ 745.126489][T25233] internal_create_group+0x55e/0xf50 [ 745.131778][T25233] ? sysfs_create_group+0x30/0x30 [ 745.136785][T25233] ? kernfs_put+0x48/0x540 [ 745.141276][T25233] ? kernfs_create_link+0x1a0/0x210 [ 745.146466][T25233] sysfs_create_groups+0x5d/0x130 [ 745.151492][T25233] device_add_attrs+0x8b/0x3e0 [ 745.156250][T25233] ? device_add_class_symlinks+0x27c/0x2a0 [ 745.162045][T25233] device_add+0x4e6/0xbd0 [ 745.166370][T25233] device_create+0x258/0x2e0 [ 745.170961][T25233] ? root_device_unregister+0x80/0x80 [ 745.176331][T25233] ? number+0xd9b/0x1040 [ 745.180568][T25233] bdi_register_va+0x94/0x600 [ 745.185226][T25233] bdi_register+0xd1/0x120 [ 745.189627][T25233] ? __device_add_disk+0x536/0x11d0 [ 745.194808][T25233] ? bdi_register_va+0x600/0x600 [ 745.199728][T25233] ? vsnprintf+0x1bfd/0x1cd0 [ 745.204315][T25233] ? __kasan_check_read+0x11/0x20 [ 745.209322][T25233] ? blk_alloc_devt+0xd4/0x320 [ 745.214074][T25233] __device_add_disk+0x5cb/0x11d0 [ 745.219090][T25233] ? device_add_disk+0x40/0x40 [ 745.223854][T25233] ? loop_add+0x400/0x760 [ 745.228187][T25233] ? vsprintf+0x40/0x40 [ 745.232330][T25233] device_add_disk+0x2a/0x40 [ 745.236902][T25233] loop_add+0x58f/0x760 [ 745.241043][T25233] loop_control_ioctl+0x564/0x740 [ 745.246062][T25233] ? loop_remove+0xb0/0xb0 [ 745.250484][T25233] ? __fget_files+0x310/0x370 [ 745.255163][T25233] ? security_file_ioctl+0xb1/0xd0 [ 745.260257][T25233] ? loop_remove+0xb0/0xb0 [ 745.264661][T25233] __se_sys_ioctl+0x115/0x190 [ 745.269326][T25233] __x64_sys_ioctl+0x7b/0x90 [ 745.273902][T25233] do_syscall_64+0x34/0x70 [ 745.278305][T25233] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 745.284181][T25233] RIP: 0033:0x7fb457f980f9 [ 745.288578][T25233] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 745.308176][T25233] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.316602][T25233] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 745.324567][T25233] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 745.332538][T25233] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 745.340505][T25233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 745.348467][T25233] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 745.356921][T25233] ------------[ cut here ]------------ [ 745.362522][T25233] WARNING: CPU: 0 PID: 25233 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 745.371718][T25233] Modules linked in: [ 745.376170][T25233] CPU: 0 PID: 25233 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 745.388146][T25233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 745.398362][T25233] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 745.404336][T25233] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 745.424104][T25233] RSP: 0018:ffffc90006617bc0 EFLAGS: 00010287 [ 745.430233][T25233] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 745.438332][T25233] RDX: ffffc9000153d000 RSI: 000000000002b8ea RDI: 000000000002b8eb [ 745.446364][T25233] RBP: ffffc90006617d08 R08: ffffffff82412a76 R09: ffffc90006617610 [ 745.454408][T25233] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 745.462437][T25233] R13: ffff88810a757000 R14: ffff8881117d3338 R15: ffff8881117d3000 [ 745.470454][T25233] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 745.479449][T25233] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 745.486090][T25233] CR2: 0000555556cc6728 CR3: 000000011d3fd000 CR4: 00000000003506a0 [ 745.494132][T25233] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 745.502214][T25233] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 745.510299][T25233] Call Trace: [ 745.513690][T25233] ? device_add_disk+0x40/0x40 [ 745.518518][T25233] ? loop_add+0x400/0x760 [ 745.522924][T25233] ? vsprintf+0x40/0x40 [ 745.527163][T25233] device_add_disk+0x2a/0x40 [ 745.531794][T25233] loop_add+0x58f/0x760 [ 745.536098][T25233] loop_control_ioctl+0x564/0x740 [ 745.541170][T25233] ? loop_remove+0xb0/0xb0 [ 745.545651][T25233] ? __fget_files+0x310/0x370 [ 745.550372][T25233] ? security_file_ioctl+0xb1/0xd0 [ 745.555536][T25233] ? loop_remove+0xb0/0xb0 [ 745.559995][T25233] __se_sys_ioctl+0x115/0x190 [ 745.564734][T25233] __x64_sys_ioctl+0x7b/0x90 [ 745.569352][T25233] do_syscall_64+0x34/0x70 [ 745.573852][T25233] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 745.579770][T25233] RIP: 0033:0x7fb457f980f9 [ 745.584243][T25233] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 745.603887][T25233] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.612344][T25233] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 745.620346][T25233] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 745.628360][T25233] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 745.636383][T25233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 745.644398][T25233] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 745.652407][T25233] ---[ end trace e057be27904f7523 ]--- [ 745.677073][T25234] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 745.677409][T25239] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 745.691434][T25234] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 745.714520][T25234] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 745.720522][T25239] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) 21:23:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, @loopback, @empty}}) 21:23:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:49 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:49 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 50) [ 745.735918][T25239] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 745.897817][T25262] FAULT_INJECTION: forcing a failure. [ 745.897817][T25262] name failslab, interval 1, probability 0, space 0, times 0 [ 745.910514][T25262] CPU: 1 PID: 25262 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 745.922220][T25262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 745.932263][T25262] Call Trace: [ 745.935542][T25262] dump_stack_lvl+0x1e2/0x24b [ 745.940209][T25262] ? panic+0x7d7/0x7d7 [ 745.944266][T25262] ? bfq_pos_tree_add_move+0x43e/0x43e [ 745.949714][T25262] ? __kasan_check_write+0x14/0x20 [ 745.954841][T25262] ? _raw_spin_lock+0xa3/0x1b0 [ 745.959590][T25262] dump_stack+0x15/0x17 [ 745.963737][T25262] should_fail+0x3c0/0x510 [ 745.968153][T25262] __should_failslab+0x9f/0xe0 [ 745.972924][T25262] should_failslab+0x9/0x20 [ 745.977415][T25262] kmem_cache_alloc+0x3f/0x300 [ 745.982163][T25262] ? __kernfs_new_node+0xdb/0x6e0 [ 745.987173][T25262] __kernfs_new_node+0xdb/0x6e0 [ 745.992011][T25262] ? kernfs_activate+0x409/0x420 [ 745.996941][T25262] ? kernfs_new_node+0x170/0x170 [ 746.001872][T25262] ? kernfs_add_one+0x4c5/0x5e0 [ 746.006714][T25262] ? __kernfs_create_file+0x1fb/0x270 [ 746.012073][T25262] ? __kasan_check_write+0x14/0x20 [ 746.017187][T25262] kernfs_create_dir_ns+0x9b/0x230 [ 746.022298][T25262] internal_create_group+0x29d/0xf50 [ 746.027583][T25262] ? sysfs_create_group+0x30/0x30 [ 746.032590][T25262] ? kernfs_put+0x48/0x540 [ 746.036993][T25262] ? sysfs_create_group+0x30/0x30 [ 746.042020][T25262] ? kernfs_create_link+0x1a0/0x210 [ 746.047228][T25262] sysfs_create_group+0x1f/0x30 [ 746.052111][T25262] dpm_sysfs_add+0x5d/0x290 [ 746.056613][T25262] device_add+0x52c/0xbd0 [ 746.060937][T25262] device_create+0x258/0x2e0 [ 746.065538][T25262] ? root_device_unregister+0x80/0x80 [ 746.070911][T25262] ? number+0xd9b/0x1040 [ 746.075148][T25262] bdi_register_va+0x94/0x600 [ 746.079816][T25262] bdi_register+0xd1/0x120 [ 746.084228][T25262] ? __device_add_disk+0x536/0x11d0 [ 746.089425][T25262] ? bdi_register_va+0x600/0x600 [ 746.094348][T25262] ? vsnprintf+0x1bfd/0x1cd0 [ 746.098928][T25262] ? __kasan_check_read+0x11/0x20 [ 746.103940][T25262] ? blk_alloc_devt+0xd4/0x320 [ 746.108689][T25262] __device_add_disk+0x5cb/0x11d0 [ 746.113704][T25262] ? device_add_disk+0x40/0x40 [ 746.118454][T25262] ? loop_add+0x400/0x760 [ 746.122771][T25262] ? vsprintf+0x40/0x40 [ 746.126914][T25262] device_add_disk+0x2a/0x40 [ 746.131490][T25262] loop_add+0x58f/0x760 [ 746.135632][T25262] loop_control_ioctl+0x564/0x740 [ 746.140643][T25262] ? loop_remove+0xb0/0xb0 [ 746.145048][T25262] ? __fget_files+0x310/0x370 [ 746.149715][T25262] ? security_file_ioctl+0xb1/0xd0 [ 746.154809][T25262] ? loop_remove+0xb0/0xb0 [ 746.159210][T25262] __se_sys_ioctl+0x115/0x190 [ 746.163883][T25262] __x64_sys_ioctl+0x7b/0x90 [ 746.168472][T25262] do_syscall_64+0x34/0x70 [ 746.172875][T25262] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 746.178754][T25262] RIP: 0033:0x7fb457f980f9 [ 746.183157][T25262] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 746.202745][T25262] RSP: 002b:00007fb456cea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.211145][T25262] RAX: ffffffffffffffda RBX: 00007fb4580b8050 RCX: 00007fb457f980f9 [ 746.219109][T25262] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 746.227072][T25262] RBP: 00007fb456cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 746.235032][T25262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 21:23:50 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:50 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0512"], 0x48}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="d400000019801905000000000000000002200000ff02ff1a0000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008", @ANYRES64=r2, @ANYRES16=r5], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0xd4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) pipe(&(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0512"], 0x48}}, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) dup(r3) (async) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000cc0)={0x0, 0x0, @ioapic}) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="d400000019801905000000000000000002200000ff02ff1a0000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008", @ANYRES64=r2, @ANYRES16=r5], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0xd4) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) (async) 21:23:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, @loopback, @empty}}) 21:23:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x29000000, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x2}, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, @loopback, @empty}}) 21:23:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, @loopback, @empty}}) [ 746.243006][T25262] R13: 00007ffeb359550f R14: 00007fb456cea300 R15: 0000000000022000 [ 746.254657][T25262] ------------[ cut here ]------------ [ 746.262410][T25262] WARNING: CPU: 1 PID: 25262 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 746.283777][T25262] Modules linked in: [ 746.287915][T25262] CPU: 0 PID: 25262 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 21:23:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, @loopback, @empty}}) 21:23:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, @loopback, @empty}}) 21:23:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, @loopback, @empty}}) [ 746.299825][T25262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 746.310231][T25262] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 746.316267][T25262] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 746.336349][T25262] RSP: 0018:ffffc900066dfbc0 EFLAGS: 00010283 [ 746.342566][T25262] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 746.352240][T25262] RDX: ffffc9000173e000 RSI: 0000000000027d2e RDI: 0000000000027d2f [ 746.360337][T25262] RBP: ffffc900066dfd08 R08: ffffffff82412a76 R09: ffffc900066df610 [ 746.368460][T25262] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 746.376542][T25262] R13: ffff88816e422000 R14: ffff8881071fd338 R15: ffff8881071fd000 [ 746.384601][T25262] FS: 00007fb456cea700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 746.393982][T25262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 746.400689][T25262] CR2: 00007ffe3de4ff08 CR3: 0000000119bd4000 CR4: 00000000003506b0 [ 746.408754][T25262] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 746.416958][T25262] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 746.425013][T25262] Call Trace: [ 746.428341][T25262] ? device_add_disk+0x40/0x40 [ 746.433163][T25262] ? loop_add+0x400/0x760 [ 746.437557][T25262] ? vsprintf+0x40/0x40 [ 746.441758][T25262] device_add_disk+0x2a/0x40 [ 746.446427][T25262] loop_add+0x58f/0x760 [ 746.450635][T25262] loop_control_ioctl+0x564/0x740 [ 746.455745][T25262] ? loop_remove+0xb0/0xb0 [ 746.460214][T25262] ? __fget_files+0x310/0x370 [ 746.464942][T25262] ? security_file_ioctl+0xb1/0xd0 [ 746.470100][T25262] ? loop_remove+0xb0/0xb0 [ 746.474599][T25262] __se_sys_ioctl+0x115/0x190 [ 746.479334][T25262] __x64_sys_ioctl+0x7b/0x90 [ 746.483979][T25262] do_syscall_64+0x34/0x70 [ 746.488426][T25262] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 746.494358][T25262] RIP: 0033:0x7fb457f980f9 [ 746.498799][T25262] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 746.518445][T25262] RSP: 002b:00007fb456cea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.526907][T25262] RAX: ffffffffffffffda RBX: 00007fb4580b8050 RCX: 00007fb457f980f9 [ 746.534918][T25262] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 746.542953][T25262] RBP: 00007fb456cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 746.550944][T25262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 746.558980][T25262] R13: 00007ffeb359550f R14: 00007fb456cea300 R15: 0000000000022000 [ 746.567006][T25262] ---[ end trace e057be27904f7524 ]--- [ 746.589830][T25264] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 746.605566][T25264] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 746.619554][T25264] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 746.620766][T25296] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr 21:23:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, @loopback, @empty}}) 21:23:50 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet6(0xa, 0xa, 0x7f) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r0, 0x6, 0x5b45, 0x1}) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:50 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs201vG0UYAOB37aSlTUtCKR9NCwQBIuIjadICPXAABBIHkJDgUI4hSatQt0FNkGgVQeBQjlCJO+KIxC/gBBcEnJC4wh1VqlAuLZyM1t5NHNcOceLEhX0eaduZnbFmXs+OPbsTB1BYI+k/ScSBiPgtIgbr2fUVRur/3VxZmv5rZWk6iWr1zT+TWr0bK0vTedX8dQN5ZrmeP9qi3YVLl89NVSqzF7P8+OL598YXLl1+eu781NnZs7MXJk+dOnli4rlnJ5/pSpxpXDeGP5w/duTVt6++Pn366js/fZPk8TfF0SUjGxU+1uXGeu1gQzrp62FH6Eg5ItLh6q/N/8Eox9rgDcYrn/S0c8COqlar1b1tS/tq5cD/VWKOQ0Hl3/Tp/W9+7Nba43Zw/cX6DVAa983sqJf0RSmr0990f9tNIxFxevnvL9MjduY5BADAOt+l65+nWq3/SnFvQ707sz2UoYi4KyIORcTdEXE4Iu6JqNW9LyLu77D95k2SW9c/pWtbCmyT0vXf89ne1vr1X776i6FyljtYi78/OTNXmT2evSej0b83zU9s0Mb3L//6WbuyxvVfeqTt52vBrB/X+poe0M1MLU5tJ+ZG1z+OGO5rFX+yuhOQRMSRiBjeYhtzT3x9rF3Zv8e/gS7sM1W/ini8Pv7L0RR/Ltl4f3L8jqjMHh/Pr4pb/fzLlTfatb+t+LsgHf/9La//1fiHksb92oXO27jy+6dt72m2ev3vSd6qpfdk5z6YWly8OBGxJ3ktO//C2vnJtdfm+bx+Gv/oI63n/6FYeyeORkR6ET8QEQ9GxENZ3x+OiIHPN47/x5cefXfr8e+sNP6Zjsa/80T53A/frmt0qJP40/E/WUuNZmc28/m32Q5u9/0DAACA/4JSRByIpDS2mi6Vxsbqf8N/OPaXKvMLi0+emX//wkz9NwJD0V/Kn3QNNjwPnchu6/P8ZFP+RPbc+Ivyvlp+bHq+MtPr4KHgBtrM/9Qf5V73Dthxfq8FxWX+Q3GZ/1Bc5j8UV4v5v68X/QB2X6vv/4960A9g91n/Q3GZ/1Bc5j8Ul/kPhbSd3/VLFDkRpduiGxI7lOj1JxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB3/BMAAP//AUjmdg==") 21:23:50 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x29}, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:50 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 51) 21:23:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, @loopback, @empty}}) [ 746.646672][T25296] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 746.659378][T25296] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x2900}, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, @loopback, @empty}}) 21:23:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, @loopback, @empty}}) 21:23:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, @loopback, @empty}}) 21:23:50 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @loopback, @empty}}) [ 746.733546][T25314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 746.746685][T25307] FAULT_INJECTION: forcing a failure. [ 746.746685][T25307] name failslab, interval 1, probability 0, space 0, times 0 [ 746.760127][T25307] CPU: 0 PID: 25307 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 746.771850][T25307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 746.781914][T25307] Call Trace: [ 746.785223][T25307] dump_stack_lvl+0x1e2/0x24b [ 746.789907][T25307] ? panic+0x7d7/0x7d7 [ 746.793983][T25307] ? mutex_unlock+0x29/0xf0 [ 746.798478][T25307] ? bfq_pos_tree_add_move+0x43e/0x43e [ 746.803926][T25307] ? kernfs_xattr_get+0x80/0x90 [ 746.808773][T25307] ? selinux_kernfs_init_security+0x1a8/0x760 [ 746.814830][T25307] dump_stack+0x15/0x17 [ 746.819074][T25307] should_fail+0x3c0/0x510 [ 746.823481][T25307] __should_failslab+0x9f/0xe0 [ 746.828250][T25307] should_failslab+0x9/0x20 [ 746.832762][T25307] kmem_cache_alloc+0x3f/0x300 [ 746.837537][T25307] ? __kernfs_new_node+0xdb/0x6e0 [ 746.842557][T25307] __kernfs_new_node+0xdb/0x6e0 [ 746.847403][T25307] ? __kasan_check_write+0x14/0x20 [ 746.852511][T25307] ? mutex_lock+0xb2/0x1e0 [ 746.856922][T25307] ? mutex_trylock+0x180/0x180 [ 746.861698][T25307] ? kernfs_new_node+0x170/0x170 [ 746.866628][T25307] ? mutex_lock+0xb2/0x1e0 [ 746.871043][T25307] ? __kasan_check_write+0x14/0x20 [ 746.876148][T25307] ? mutex_unlock+0x29/0xf0 [ 746.880639][T25307] ? kernfs_activate+0x409/0x420 [ 746.885567][T25307] kernfs_new_node+0x97/0x170 [ 746.890235][T25307] __kernfs_create_file+0x4a/0x270 [ 746.895359][T25307] sysfs_add_file_mode_ns+0x273/0x320 [ 746.900726][T25307] sysfs_merge_group+0x207/0x460 [ 746.905653][T25307] ? sysfs_remove_groups+0xb0/0xb0 [ 746.910755][T25307] dpm_sysfs_add+0xcf/0x290 [ 746.915247][T25307] device_add+0x52c/0xbd0 [ 746.919572][T25307] device_create+0x258/0x2e0 [ 746.924148][T25307] ? root_device_unregister+0x80/0x80 [ 746.929506][T25307] ? number+0xd9b/0x1040 [ 746.933733][T25307] bdi_register_va+0x94/0x600 [ 746.938408][T25307] bdi_register+0xd1/0x120 [ 746.942814][T25307] ? __device_add_disk+0x536/0x11d0 [ 746.947997][T25307] ? bdi_register_va+0x600/0x600 [ 746.952936][T25307] ? vsnprintf+0x1bfd/0x1cd0 [ 746.957525][T25307] ? __kasan_check_read+0x11/0x20 [ 746.962537][T25307] ? blk_alloc_devt+0xd4/0x320 [ 746.967292][T25307] __device_add_disk+0x5cb/0x11d0 [ 746.972307][T25307] ? device_add_disk+0x40/0x40 [ 746.977057][T25307] ? loop_add+0x400/0x760 [ 746.981372][T25307] ? vsprintf+0x40/0x40 [ 746.985514][T25307] device_add_disk+0x2a/0x40 [ 746.990089][T25307] loop_add+0x58f/0x760 [ 746.994231][T25307] loop_control_ioctl+0x564/0x740 [ 746.999241][T25307] ? loop_remove+0xb0/0xb0 [ 747.003647][T25307] ? __fget_files+0x310/0x370 [ 747.008315][T25307] ? security_file_ioctl+0xb1/0xd0 [ 747.013414][T25307] ? loop_remove+0xb0/0xb0 [ 747.017839][T25307] __se_sys_ioctl+0x115/0x190 [ 747.022502][T25307] __x64_sys_ioctl+0x7b/0x90 [ 747.027079][T25307] do_syscall_64+0x34/0x70 [ 747.031488][T25307] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 747.037366][T25307] RIP: 0033:0x7fb457f980f9 [ 747.041772][T25307] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 747.061364][T25307] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.069770][T25307] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 21:23:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, @loopback, @empty}}) [ 747.077744][T25307] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 747.085713][T25307] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 747.093682][T25307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.101651][T25307] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 747.115606][T25307] ------------[ cut here ]------------ [ 747.121164][T25307] WARNING: CPU: 0 PID: 25307 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 747.130850][T25307] Modules linked in: [ 747.134912][T25307] CPU: 1 PID: 25307 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 747.146779][T25307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 747.157066][T25307] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 747.163073][T25307] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 747.183069][T25307] RSP: 0018:ffffc90006c07bc0 EFLAGS: 00010287 [ 747.189280][T25307] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 747.197419][T25307] RDX: ffffc9000153d000 RSI: 0000000000028839 RDI: 000000000002883a [ 747.205526][T25307] RBP: ffffc90006c07d08 R08: ffffffff82412a76 R09: ffffc90006c07610 [ 747.213600][T25307] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 747.221572][T25307] R13: ffff88816e6e7000 R14: ffff88816e6e5338 R15: ffff88816e6e5000 [ 747.230281][T25307] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 747.239282][T25307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.245896][T25307] CR2: 0000555556cc6728 CR3: 000000011aa2d000 CR4: 00000000003506a0 [ 747.253909][T25307] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 747.261893][T25307] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 747.269888][T25307] Call Trace: [ 747.273207][T25307] ? device_add_disk+0x40/0x40 [ 747.277973][T25307] ? loop_add+0x400/0x760 [ 747.282321][T25307] ? vsprintf+0x40/0x40 [ 747.286511][T25307] device_add_disk+0x2a/0x40 [ 747.291089][T25307] loop_add+0x58f/0x760 [ 747.295267][T25307] loop_control_ioctl+0x564/0x740 [ 747.300659][T25307] ? loop_remove+0xb0/0xb0 [ 747.305113][T25307] ? __fget_files+0x310/0x370 [ 747.309799][T25307] ? security_file_ioctl+0xb1/0xd0 [ 747.315008][T25307] ? loop_remove+0xb0/0xb0 [ 747.319816][T25307] __se_sys_ioctl+0x115/0x190 [ 747.324755][T25307] __x64_sys_ioctl+0x7b/0x90 [ 747.329363][T25307] do_syscall_64+0x34/0x70 [ 747.333849][T25307] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 747.339739][T25307] RIP: 0033:0x7fb457f980f9 [ 747.344169][T25307] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 747.363969][T25307] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.372401][T25307] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 747.380384][T25307] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 747.388381][T25307] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 747.396374][T25307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.404361][T25307] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 747.412352][T25307] ---[ end trace e057be27904f7525 ]--- [ 747.425784][T25312] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 747.444532][T25312] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 747.444658][T25308] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 747.457196][T25312] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, @loopback, @empty}}) [ 747.480944][T25308] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 747.493795][T25308] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 21:23:51 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (rerun: 64) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) r3 = socket$inet6(0xa, 0xa, 0x7f) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r0, 0x6, 0x5b45, 0x1}) (async, rerun: 32) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) (rerun: 32) 21:23:51 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:51 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 52) 21:23:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x1000000}, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @loopback, @empty}}) 21:23:51 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs28tvG0UYAPBv7bilLxJKefQBBAEi4pE0aYEeOAACiQNISHAox5CkVajboCZItIogcChHqMQdcUTiL+AEFwSckLjCHVWqUC4tnIzW3k0c1w5x4sSF/f2kbWd2x5r5dnbs2Z1sAIU1nP6TROyPiN8iYrCRXVtguPHfzeXFqb+WF6eSqNXe/DOpl7uxvDiVF80/ty/PLDXyR9vUO3/p8rnJanXmYpYfWzj/3tj8pctPz56fPDtzdubCxKlTJ0+MP/fsxDM9iTON68aRD+eOHX717auvT52++s5P3yR5/C1x9Mjwegcf63Fl/XagKZ0M9LEhdKUcEWl3VerjfzDKsdp5g/HKJ31tHLCtarVabXfnw5Ua8D+WRL9bAPRH/kOf3v/m2w5NPW4L119s3AClcd/MtsaRgShlZSot97e9NBwRp5f+/jLdYnueQwAArPFdOv95qt38rxT3NpW7M1tDGYqIuyLiYETcHRGHIuKeiHrZ+yLi/i7rb10kuXX+U7q2qcA2KJ3/PZ+tba2d/+WzvxgqZ7kD9fgryZnZ6szx7JyMRGV3mh9fp47vX/71s07Hmud/6ZbWn88Fs3ZcG2h5QDc9uTC5lZibXf844shAu/iTlZWAJCIOR8SRTdYx+8TXxzod+/f419GDdabaVxGPN/p/KVrizyXrr0+O3RHVmeNj+VVxq59/ufJGp/q3FH8PpP2/t+31vxL/UNK8XjvffR1Xfv+04z3NZq//Xclb9fSubN8HkwsLF8cjdiWvZftfWN0/sfrZPJ+XT+MfeaT9+D8Yq2fiaESkF/EDEfFgRDyUtf3hiNj3+frx//jSo+9uPv7tlcY/3VX/d58on/vh2zWVDnUTf9r/J+upkWzPRr7/NtrArZ4/AAAA+C8oRcT+SEqjK+lSaXS08Tf8h2JvqTo3v/Dkmbn3L0w33hEYikopf9I12PQ8dDy7rc/zEy35E9lz4y/Ke+r50am56nS/g4eC29dh/Kf+KPe7dcC2874WFJfxD8Vl/ENxGf9QXG3G/55+tAPYee1+/z/qQzuAnWf+D8Vl/ENxGf9QXMY/FNJW3uuXKHIiSrdFMyS2KdHvbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+CcAAP//9VLmdw==") 21:23:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, @loopback, @empty}}) 21:23:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x2000000}, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:51 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) r3 = socket$inet6(0xa, 0xa, 0x7f) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r0, 0x6, 0x5b45, 0x1}) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, @loopback, @empty}}) 21:23:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, @loopback, @empty}}) [ 747.613906][T25338] FAULT_INJECTION: forcing a failure. [ 747.613906][T25338] name failslab, interval 1, probability 0, space 0, times 0 [ 747.628107][T25338] CPU: 0 PID: 25338 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 747.639826][T25338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 747.649870][T25338] Call Trace: [ 747.653157][T25338] dump_stack_lvl+0x1e2/0x24b [ 747.657819][T25338] ? panic+0x7d7/0x7d7 [ 747.661872][T25338] ? bfq_pos_tree_add_move+0x43e/0x43e [ 747.667322][T25338] ? selinux_kernfs_init_security+0x1a8/0x760 [ 747.673377][T25338] dump_stack+0x15/0x17 [ 747.677518][T25338] should_fail+0x3c0/0x510 [ 747.681923][T25338] __should_failslab+0x9f/0xe0 [ 747.686672][T25338] should_failslab+0x9/0x20 [ 747.691159][T25338] kmem_cache_alloc+0x3f/0x300 [ 747.695908][T25338] ? __kernfs_new_node+0xdb/0x6e0 [ 747.700939][T25338] __kernfs_new_node+0xdb/0x6e0 [ 747.705777][T25338] ? __kasan_check_write+0x14/0x20 [ 747.710876][T25338] ? mutex_lock+0xb2/0x1e0 [ 747.715278][T25338] ? mutex_trylock+0x180/0x180 [ 747.720027][T25338] ? kernfs_new_node+0x170/0x170 [ 747.724957][T25338] ? __kasan_check_write+0x14/0x20 [ 747.730054][T25338] ? mutex_unlock+0x29/0xf0 [ 747.734568][T25338] ? kernfs_activate+0x409/0x420 [ 747.739496][T25338] kernfs_new_node+0x97/0x170 [ 747.744162][T25338] __kernfs_create_file+0x4a/0x270 [ 747.749262][T25338] sysfs_add_file_mode_ns+0x273/0x320 [ 747.754629][T25338] sysfs_merge_group+0x207/0x460 [ 747.759659][T25338] ? sysfs_remove_groups+0xb0/0xb0 [ 747.764768][T25338] dpm_sysfs_add+0xcf/0x290 [ 747.769258][T25338] device_add+0x52c/0xbd0 [ 747.773577][T25338] device_create+0x258/0x2e0 [ 747.778152][T25338] ? root_device_unregister+0x80/0x80 [ 747.783532][T25338] ? number+0xd9b/0x1040 [ 747.787770][T25338] bdi_register_va+0x94/0x600 [ 747.792432][T25338] bdi_register+0xd1/0x120 [ 747.796833][T25338] ? __device_add_disk+0x536/0x11d0 [ 747.802017][T25338] ? bdi_register_va+0x600/0x600 [ 747.806942][T25338] ? vsnprintf+0x1bfd/0x1cd0 [ 747.811525][T25338] ? __kasan_check_read+0x11/0x20 [ 747.816621][T25338] ? blk_alloc_devt+0xd4/0x320 [ 747.821372][T25338] __device_add_disk+0x5cb/0x11d0 [ 747.826388][T25338] ? device_add_disk+0x40/0x40 [ 747.831138][T25338] ? loop_add+0x400/0x760 [ 747.835454][T25338] ? vsprintf+0x40/0x40 [ 747.839599][T25338] device_add_disk+0x2a/0x40 [ 747.844177][T25338] loop_add+0x58f/0x760 [ 747.848325][T25338] loop_control_ioctl+0x564/0x740 [ 747.853345][T25338] ? loop_remove+0xb0/0xb0 [ 747.857753][T25338] ? __fget_files+0x310/0x370 [ 747.862421][T25338] ? security_file_ioctl+0xb1/0xd0 [ 747.867534][T25338] ? loop_remove+0xb0/0xb0 [ 747.871956][T25338] __se_sys_ioctl+0x115/0x190 [ 747.876639][T25338] __x64_sys_ioctl+0x7b/0x90 [ 747.881216][T25338] do_syscall_64+0x34/0x70 [ 747.885635][T25338] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 747.891527][T25338] RIP: 0033:0x7fb457f980f9 [ 747.895932][T25338] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 747.915533][T25338] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.923938][T25338] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 747.931899][T25338] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 747.939859][T25338] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 747.947815][T25338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.955776][T25338] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @loopback, @empty}}) 21:23:51 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000, @loopback, @empty}}) [ 747.964583][T25338] ------------[ cut here ]------------ [ 747.972295][T25338] WARNING: CPU: 1 PID: 25338 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 747.981522][T25338] Modules linked in: [ 747.985667][T25338] CPU: 1 PID: 25338 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 747.998373][T25338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 748.008883][T25338] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 748.014850][T25338] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 748.034595][T25338] RSP: 0018:ffffc90006dbfbc0 EFLAGS: 00010287 [ 748.040669][T25338] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 748.048931][T25338] RDX: ffffc9000153d000 RSI: 00000000000277c2 RDI: 00000000000277c3 [ 748.056926][T25338] RBP: ffffc90006dbfd08 R08: ffffffff82412a76 R09: ffffc90006dbf610 [ 748.064933][T25338] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 748.072919][T25338] R13: ffff88815c348000 R14: ffff88815c34e338 R15: ffff88815c34e000 [ 748.080890][T25338] FS: 00007fb456d0b700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 748.089827][T25338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.096435][T25338] CR2: 0000555556cc6728 CR3: 0000000117099000 CR4: 00000000003506b0 [ 748.104436][T25338] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 748.112428][T25338] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 748.120391][T25338] Call Trace: [ 748.123726][T25338] ? device_add_disk+0x40/0x40 [ 748.128515][T25338] ? loop_add+0x400/0x760 [ 748.133038][T25338] ? vsprintf+0x40/0x40 [ 748.137516][T25338] device_add_disk+0x2a/0x40 [ 748.142228][T25338] loop_add+0x58f/0x760 [ 748.146432][T25338] loop_control_ioctl+0x564/0x740 [ 748.151474][T25338] ? loop_remove+0xb0/0xb0 [ 748.155975][T25338] ? __fget_files+0x310/0x370 [ 748.160861][T25338] ? security_file_ioctl+0xb1/0xd0 [ 748.166047][T25338] ? loop_remove+0xb0/0xb0 [ 748.170517][T25338] __se_sys_ioctl+0x115/0x190 [ 748.175247][T25338] __x64_sys_ioctl+0x7b/0x90 [ 748.179871][T25338] do_syscall_64+0x34/0x70 [ 748.184331][T25338] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 748.190280][T25338] RIP: 0033:0x7fb457f980f9 [ 748.194742][T25338] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 748.214404][T25338] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.222877][T25338] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 748.230899][T25338] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 748.238959][T25338] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 748.246999][T25338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 748.255038][T25338] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 748.263068][T25338] ---[ end trace e057be27904f7526 ]--- [ 748.309921][T25343] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 748.322033][T25358] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 748.322866][T25343] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 748.335486][T25358] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 748.348220][T25343] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 748.360346][T25358] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 21:23:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x29000000}, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, @loopback, @empty}}) 21:23:52 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) write$binfmt_elf64(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x5, 0x1f, 0x3f, 0xffff, 0x2, 0x3, 0xffffffe1, 0x29c, 0x40, 0x143, 0x800, 0x7ff, 0x38, 0x2, 0x2, 0x7fff, 0x42}, [{0x1, 0x98, 0x6, 0x5, 0x7fffffffffffffff, 0x20, 0x2, 0x9}], "fbc7c8b8e5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x77d) 21:23:52 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 53) 21:23:52 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:52 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs271vHEUbAPBn7+zkzddrE8JHnABGgLD4sGPHQAoKgkCiAAkJilAa24lMLjGKjUQiCwxFKCESPaJE4i+gggYBFRIt9ChShNwkUB3au137fLkzPvvsC+zvJ20yszunmWdn5252xxtAYQ2n/yQRByPi14gYqGfXFxiu/3drZWn6z5Wl6SSq1Tf+SGrlbq4sTedF888dyDPL9fyxFvUuXL5yfqpSmb2U5ccWL7w7tnD5ytNzF6bOzZ6bvThx6tTkyfHnnp14pitxpnHdHPpg/vjRV9669tr0mWtv//h1ksffFEeXDG908LEuV9ZrhxrSSV8PG0JHyhGRdld/bfwPRDnWOm8gXv64p40DdlS1Wq3ubX94uQr8hyXR6xYAvZH/0Kf3v/m2S1OPO8KN0xGTWfy3sq1+pC9KWZn+pvvbbhqOiDPLf32RbrEzzyEAANb59nREPNVq/leKexvK/T9bQxmMiLsi4nBE3B0RRyLinoha2fsi4v4O629eJLl9/lO6vqXANimd/z2frW2tn//ls78YLGe5Q7X4+5Ozc5XZE9k5GYn+vWl+fIM6vnvpl0/bHWuc/6VbWn8+F8zacb2v6QHdzNTi1HZibnTjo4ihvlbxJ6srAUlEHI2IoS3WMffEV8fbHfvn+DfQhXWm6pcRj9f7fzma4s8lG69Pjv0vKrMnxvKr4nY//Xz19Xb1byv+Lkj7f3/L6381/sGkcb12ofM6rv72Sdt7mq1e/3uSN2vpPdm+96cWFy+NR+xJXs32v7C2f2Lts3k+L5/GP/JI6/F/ONbOxLGISC/iByLiwYh4KGv7wxFx4LON4//hxUff2Xr8OyuNf6aj/u88UT7//TfrKh3sJP60/ydrqZFsz2a+/zbbwO2ePwAAAPg3KEXEwUhKo6vpUml0tP43/Edif6kyv7D45Nn59y7O1N8RGIz+Uv6ka6Dheeh4dluf5yea8iez58afl/fV8qPT85WZXgcPBXegzfhP/V7udeuAHed9LSgu4x+Ky/iH4jL+obhajP99vWgHsPta/f5/2IN2ALvP/B+Ky/iH4jL+obiMfyik7bzXL1HkRJTuiGZI7FCi199MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fF3AAAA//9ZPuci") 21:23:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x100000000000000}, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, @loopback, @empty}}) 21:23:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000, @loopback, @empty}}) 21:23:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, @loopback, @empty}}) 21:23:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000, @loopback, @empty}}) [ 748.490709][T25372] FAULT_INJECTION: forcing a failure. [ 748.490709][T25372] name failslab, interval 1, probability 0, space 0, times 0 [ 748.503415][T25372] CPU: 0 PID: 25372 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 748.515136][T25372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 748.525205][T25372] Call Trace: [ 748.528515][T25372] dump_stack_lvl+0x1e2/0x24b [ 748.533203][T25372] ? panic+0x7d7/0x7d7 21:23:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @loopback, @empty}}) 21:23:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, @loopback, @empty}}) 21:23:52 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, @loopback, @empty}}) [ 748.537280][T25372] ? bfq_pos_tree_add_move+0x43e/0x43e [ 748.542754][T25372] ? selinux_kernfs_init_security+0x1a8/0x760 [ 748.548921][T25372] dump_stack+0x15/0x17 [ 748.553090][T25372] should_fail+0x3c0/0x510 [ 748.557511][T25372] __should_failslab+0x9f/0xe0 [ 748.562295][T25372] should_failslab+0x9/0x20 [ 748.566805][T25372] kmem_cache_alloc+0x3f/0x300 [ 748.571578][T25372] ? __kernfs_new_node+0xdb/0x6e0 [ 748.576613][T25372] __kernfs_new_node+0xdb/0x6e0 [ 748.581484][T25372] ? __kasan_check_write+0x14/0x20 [ 748.586645][T25372] ? mutex_lock+0xb2/0x1e0 [ 748.591064][T25372] ? mutex_trylock+0x180/0x180 [ 748.595843][T25372] ? kernfs_new_node+0x170/0x170 [ 748.600780][T25372] ? __kasan_check_write+0x14/0x20 [ 748.605882][T25372] ? mutex_unlock+0x29/0xf0 [ 748.610395][T25372] ? kernfs_activate+0x409/0x420 [ 748.615317][T25372] kernfs_new_node+0x97/0x170 [ 748.619983][T25372] __kernfs_create_file+0x4a/0x270 [ 748.625092][T25372] sysfs_add_file_mode_ns+0x273/0x320 [ 748.630449][T25372] sysfs_merge_group+0x207/0x460 [ 748.635375][T25372] ? sysfs_remove_groups+0xb0/0xb0 [ 748.640469][T25372] dpm_sysfs_add+0xcf/0x290 [ 748.644956][T25372] device_add+0x52c/0xbd0 [ 748.649274][T25372] device_create+0x258/0x2e0 [ 748.653849][T25372] ? root_device_unregister+0x80/0x80 [ 748.659215][T25372] ? number+0xd9b/0x1040 [ 748.663455][T25372] bdi_register_va+0x94/0x600 [ 748.668115][T25372] bdi_register+0xd1/0x120 [ 748.672514][T25372] ? __device_add_disk+0x536/0x11d0 [ 748.677695][T25372] ? bdi_register_va+0x600/0x600 [ 748.682613][T25372] ? vsnprintf+0x1bfd/0x1cd0 [ 748.687201][T25372] ? __kasan_check_read+0x11/0x20 [ 748.692213][T25372] ? blk_alloc_devt+0xd4/0x320 [ 748.696973][T25372] __device_add_disk+0x5cb/0x11d0 [ 748.701985][T25372] ? device_add_disk+0x40/0x40 [ 748.706733][T25372] ? loop_add+0x400/0x760 [ 748.711052][T25372] ? vsprintf+0x40/0x40 [ 748.715194][T25372] device_add_disk+0x2a/0x40 [ 748.719775][T25372] loop_add+0x58f/0x760 [ 748.723927][T25372] loop_control_ioctl+0x564/0x740 [ 748.728949][T25372] ? loop_remove+0xb0/0xb0 [ 748.733367][T25372] ? __fget_files+0x310/0x370 [ 748.738032][T25372] ? security_file_ioctl+0xb1/0xd0 [ 748.743126][T25372] ? loop_remove+0xb0/0xb0 [ 748.747522][T25372] __se_sys_ioctl+0x115/0x190 [ 748.752185][T25372] __x64_sys_ioctl+0x7b/0x90 [ 748.756756][T25372] do_syscall_64+0x34/0x70 [ 748.761157][T25372] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 748.767047][T25372] RIP: 0033:0x7fb457f980f9 [ 748.771445][T25372] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 748.791036][T25372] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.799439][T25372] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 748.807395][T25372] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 748.815350][T25372] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 748.823311][T25372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 748.831281][T25372] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 748.840008][T25372] ------------[ cut here ]------------ [ 748.843089][T25392] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 748.845625][T25372] WARNING: CPU: 0 PID: 25372 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 748.864071][T25372] Modules linked in: [ 748.867977][T25372] CPU: 0 PID: 25372 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 748.880129][T25372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 748.890240][T25372] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 748.896072][T25372] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 748.915717][T25372] RSP: 0018:ffffc900071afbc0 EFLAGS: 00010283 [ 748.921803][T25372] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 748.929790][T25372] RDX: ffffc9000153d000 RSI: 0000000000028922 RDI: 0000000000028923 [ 748.937784][T25372] RBP: ffffc900071afd08 R08: ffffffff82412a76 R09: ffffc900071af610 [ 748.945771][T25372] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 748.953771][T25372] R13: ffff88811556f000 R14: ffff8881063bb338 R15: ffff8881063bb000 [ 748.961750][T25372] FS: 00007fb456d0b700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 748.970792][T25372] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.977646][T25372] CR2: 00007f3452617718 CR3: 00000001191c0000 CR4: 00000000003506b0 [ 748.985637][T25372] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 748.993659][T25372] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 749.001651][T25372] Call Trace: [ 749.004964][T25372] ? device_add_disk+0x40/0x40 [ 749.009737][T25372] ? loop_add+0x400/0x760 [ 749.014173][T25372] ? vsprintf+0x40/0x40 [ 749.018381][T25372] device_add_disk+0x2a/0x40 [ 749.023150][T25372] loop_add+0x58f/0x760 [ 749.027354][T25372] loop_control_ioctl+0x564/0x740 [ 749.032435][T25372] ? loop_remove+0xb0/0xb0 [ 749.036915][T25372] ? __fget_files+0x310/0x370 [ 749.041623][T25372] ? security_file_ioctl+0xb1/0xd0 [ 749.046810][T25372] ? loop_remove+0xb0/0xb0 [ 749.051274][T25372] __se_sys_ioctl+0x115/0x190 [ 749.056013][T25372] __x64_sys_ioctl+0x7b/0x90 [ 749.060660][T25372] do_syscall_64+0x34/0x70 [ 749.065200][T25372] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 749.071138][T25372] RIP: 0033:0x7fb457f980f9 [ 749.075621][T25372] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 749.095321][T25372] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.103991][T25372] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 749.112017][T25372] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 749.120068][T25372] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.128116][T25372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 749.136213][T25372] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 749.144270][T25372] ---[ end trace e057be27904f7527 ]--- [ 749.167552][T25377] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 749.183277][T25374] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 749.185076][T25377] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 749.208944][T25374] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 749.209963][T25377] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 749.222916][T25374] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:53 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 54) 21:23:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x2}, @empty}}) 21:23:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x200000000000000}, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:53 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:53 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async, rerun: 64) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) (rerun: 64) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) write$binfmt_elf64(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x5, 0x1f, 0x3f, 0xffff, 0x2, 0x3, 0xffffffe1, 0x29c, 0x40, 0x143, 0x800, 0x7ff, 0x38, 0x2, 0x2, 0x7fff, 0x42}, [{0x1, 0x98, 0x6, 0x5, 0x7fffffffffffffff, 0x20, 0x2, 0x9}], "fbc7c8b8e5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x77d) 21:23:53 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x2900000000000000}, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x3}, @empty}}) 21:23:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x4}, @empty}}) [ 749.343445][T25413] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 749.364098][T25409] FAULT_INJECTION: forcing a failure. [ 749.364098][T25409] name failslab, interval 1, probability 0, space 0, times 0 [ 749.379720][T25409] CPU: 1 PID: 25409 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 749.391463][T25409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 749.401527][T25409] Call Trace: [ 749.404833][T25409] dump_stack_lvl+0x1e2/0x24b [ 749.409523][T25409] ? panic+0x7d7/0x7d7 [ 749.413609][T25409] ? bfq_pos_tree_add_move+0x43e/0x43e [ 749.419083][T25409] ? selinux_kernfs_init_security+0x1a8/0x760 [ 749.425165][T25409] dump_stack+0x15/0x17 [ 749.429327][T25409] should_fail+0x3c0/0x510 [ 749.433761][T25409] __should_failslab+0x9f/0xe0 [ 749.438535][T25409] should_failslab+0x9/0x20 [ 749.443044][T25409] kmem_cache_alloc+0x3f/0x300 [ 749.447804][T25409] ? __kernfs_new_node+0xdb/0x6e0 [ 749.452833][T25409] __kernfs_new_node+0xdb/0x6e0 [ 749.457676][T25409] ? __kasan_check_write+0x14/0x20 [ 749.462954][T25409] ? mutex_lock+0xb2/0x1e0 [ 749.467381][T25409] ? mutex_trylock+0x180/0x180 [ 749.472152][T25409] ? kernfs_new_node+0x170/0x170 [ 749.477078][T25409] ? __kasan_check_write+0x14/0x20 [ 749.482173][T25409] ? mutex_unlock+0x29/0xf0 [ 749.486664][T25409] ? kernfs_activate+0x409/0x420 [ 749.491587][T25409] kernfs_new_node+0x97/0x170 [ 749.496256][T25409] __kernfs_create_file+0x4a/0x270 [ 749.501353][T25409] sysfs_add_file_mode_ns+0x273/0x320 [ 749.506711][T25409] sysfs_merge_group+0x207/0x460 [ 749.511637][T25409] ? sysfs_remove_groups+0xb0/0xb0 [ 749.516735][T25409] dpm_sysfs_add+0xcf/0x290 [ 749.521233][T25409] device_add+0x52c/0xbd0 [ 749.525549][T25409] device_create+0x258/0x2e0 [ 749.530122][T25409] ? root_device_unregister+0x80/0x80 [ 749.535483][T25409] ? number+0xd9b/0x1040 [ 749.539745][T25409] bdi_register_va+0x94/0x600 [ 749.544408][T25409] bdi_register+0xd1/0x120 [ 749.548815][T25409] ? __device_add_disk+0x536/0x11d0 [ 749.554001][T25409] ? bdi_register_va+0x600/0x600 [ 749.558925][T25409] ? vsnprintf+0x1bfd/0x1cd0 [ 749.563530][T25409] ? __kasan_check_read+0x11/0x20 [ 749.568541][T25409] ? blk_alloc_devt+0xd4/0x320 [ 749.573299][T25409] __device_add_disk+0x5cb/0x11d0 [ 749.578317][T25409] ? device_add_disk+0x40/0x40 [ 749.583069][T25409] ? loop_add+0x400/0x760 [ 749.587398][T25409] ? vsprintf+0x40/0x40 [ 749.591563][T25409] device_add_disk+0x2a/0x40 [ 749.596155][T25409] loop_add+0x58f/0x760 [ 749.600307][T25409] loop_control_ioctl+0x564/0x740 [ 749.605325][T25409] ? loop_remove+0xb0/0xb0 [ 749.609856][T25409] ? __fget_files+0x310/0x370 [ 749.614558][T25409] ? security_file_ioctl+0xb1/0xd0 [ 749.619671][T25409] ? loop_remove+0xb0/0xb0 [ 749.624079][T25409] __se_sys_ioctl+0x115/0x190 [ 749.628746][T25409] __x64_sys_ioctl+0x7b/0x90 [ 749.633325][T25409] do_syscall_64+0x34/0x70 [ 749.637729][T25409] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 749.643607][T25409] RIP: 0033:0x7fb457f980f9 [ 749.648006][T25409] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 749.667612][T25409] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.676013][T25409] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 749.683976][T25409] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 21:23:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x5}, @empty}}) 21:23:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x6}, @empty}}) [ 749.691952][T25409] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 749.699911][T25409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 749.707870][T25409] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 749.720158][T25409] ------------[ cut here ]------------ [ 749.726580][T25409] WARNING: CPU: 0 PID: 25409 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 749.736128][T25409] Modules linked in: 21:23:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x7}, @empty}}) [ 749.740417][T25409] CPU: 0 PID: 25409 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 749.752814][T25409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 749.763122][T25409] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 749.769092][T25409] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 749.788968][T25409] RSP: 0018:ffffc90006f37bc0 EFLAGS: 00010287 [ 749.795213][T25409] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 749.803321][T25409] RDX: ffffc9000153d000 RSI: 0000000000028a41 RDI: 0000000000028a42 [ 749.811311][T25409] RBP: ffffc90006f37d08 R08: ffffffff82412a76 R09: ffffc90006f37610 [ 749.819371][T25409] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 749.827495][T25409] R13: ffff888118337000 R14: ffff888118335338 R15: ffff888118335000 [ 749.835586][T25409] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 749.844637][T25409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 749.851317][T25409] CR2: 0000555556cc6728 CR3: 000000011583d000 CR4: 00000000003506a0 [ 749.859402][T25409] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 749.867457][T25409] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 749.875483][T25409] Call Trace: [ 749.878810][T25409] ? device_add_disk+0x40/0x40 [ 749.883628][T25409] ? loop_add+0x400/0x760 [ 749.887992][T25409] ? vsprintf+0x40/0x40 [ 749.892216][T25409] device_add_disk+0x2a/0x40 [ 749.896842][T25409] loop_add+0x58f/0x760 [ 749.901020][T25409] loop_control_ioctl+0x564/0x740 [ 749.906103][T25409] ? loop_remove+0xb0/0xb0 [ 749.910561][T25409] ? __fget_files+0x310/0x370 [ 749.915285][T25409] ? security_file_ioctl+0xb1/0xd0 [ 749.920428][T25409] ? loop_remove+0xb0/0xb0 [ 749.924909][T25409] __se_sys_ioctl+0x115/0x190 [ 749.929617][T25409] __x64_sys_ioctl+0x7b/0x90 [ 749.934269][T25409] do_syscall_64+0x34/0x70 [ 749.938691][T25409] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 749.944597][T25409] RIP: 0033:0x7fb457f980f9 [ 749.949019][T25409] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 749.968648][T25409] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.977089][T25409] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 749.985096][T25409] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 21:23:53 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 55) 21:23:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x8}, @empty}}) 21:23:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x0, 0x300}, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 749.993192][T25409] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 750.001171][T25409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 750.009182][T25409] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 750.017176][T25409] ---[ end trace e057be27904f7528 ]--- [ 750.064041][T25408] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 750.076911][T25407] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 750.094460][T25433] FAULT_INJECTION: forcing a failure. [ 750.094460][T25433] name failslab, interval 1, probability 0, space 0, times 0 [ 750.103056][T25408] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 750.110023][T25407] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 750.121500][T25408] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 750.134012][T25433] CPU: 0 PID: 25433 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 750.154051][T25433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 750.164103][T25433] Call Trace: [ 750.167388][T25433] dump_stack_lvl+0x1e2/0x24b [ 750.172051][T25433] ? panic+0x7d7/0x7d7 [ 750.176108][T25433] ? bfq_pos_tree_add_move+0x43e/0x43e [ 750.181553][T25433] ? selinux_kernfs_init_security+0x1a8/0x760 [ 750.187617][T25433] dump_stack+0x15/0x17 [ 750.191762][T25433] should_fail+0x3c0/0x510 [ 750.196169][T25433] __should_failslab+0x9f/0xe0 [ 750.200922][T25433] should_failslab+0x9/0x20 [ 750.205414][T25433] kmem_cache_alloc+0x3f/0x300 [ 750.210168][T25433] ? __kernfs_new_node+0xdb/0x6e0 [ 750.215202][T25433] __kernfs_new_node+0xdb/0x6e0 [ 750.220040][T25433] ? __kasan_check_write+0x14/0x20 [ 750.225136][T25433] ? mutex_lock+0xb2/0x1e0 [ 750.229537][T25433] ? mutex_trylock+0x180/0x180 [ 750.234286][T25433] ? kernfs_new_node+0x170/0x170 [ 750.239227][T25433] ? __kasan_check_write+0x14/0x20 [ 750.244323][T25433] ? mutex_unlock+0x29/0xf0 [ 750.248811][T25433] ? kernfs_activate+0x409/0x420 [ 750.253735][T25433] kernfs_new_node+0x97/0x170 [ 750.258422][T25433] __kernfs_create_file+0x4a/0x270 [ 750.263522][T25433] sysfs_add_file_mode_ns+0x273/0x320 [ 750.268906][T25433] sysfs_merge_group+0x207/0x460 [ 750.273854][T25433] ? sysfs_remove_groups+0xb0/0xb0 [ 750.278989][T25433] dpm_sysfs_add+0xcf/0x290 [ 750.283487][T25433] device_add+0x52c/0xbd0 [ 750.287807][T25433] device_create+0x258/0x2e0 [ 750.292386][T25433] ? root_device_unregister+0x80/0x80 [ 750.297761][T25433] ? number+0xd9b/0x1040 [ 750.301996][T25433] bdi_register_va+0x94/0x600 [ 750.306660][T25433] bdi_register+0xd1/0x120 [ 750.311068][T25433] ? __device_add_disk+0x536/0x11d0 [ 750.316262][T25433] ? bdi_register_va+0x600/0x600 [ 750.321195][T25433] ? vsnprintf+0x1bfd/0x1cd0 [ 750.325780][T25433] ? __kasan_check_read+0x11/0x20 [ 750.330796][T25433] ? blk_alloc_devt+0xd4/0x320 [ 750.335563][T25433] __device_add_disk+0x5cb/0x11d0 [ 750.340596][T25433] ? device_add_disk+0x40/0x40 [ 750.345367][T25433] ? loop_add+0x400/0x760 [ 750.349686][T25433] ? vsprintf+0x40/0x40 [ 750.353829][T25433] device_add_disk+0x2a/0x40 [ 750.358403][T25433] loop_add+0x58f/0x760 [ 750.362560][T25433] loop_control_ioctl+0x564/0x740 [ 750.367673][T25433] ? loop_remove+0xb0/0xb0 [ 750.372082][T25433] ? __fget_files+0x310/0x370 [ 750.376750][T25433] ? security_file_ioctl+0xb1/0xd0 [ 750.381862][T25433] ? loop_remove+0xb0/0xb0 [ 750.386265][T25433] __se_sys_ioctl+0x115/0x190 [ 750.391100][T25433] __x64_sys_ioctl+0x7b/0x90 [ 750.395673][T25433] do_syscall_64+0x34/0x70 [ 750.400078][T25433] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 750.405955][T25433] RIP: 0033:0x7fb457f980f9 [ 750.410358][T25433] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 750.429949][T25433] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.438350][T25433] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 750.446327][T25433] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 750.454290][T25433] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 750.462250][T25433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 750.470222][T25433] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 750.478719][T25433] ------------[ cut here ]------------ [ 750.485906][T25407] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 750.494984][T25433] WARNING: CPU: 1 PID: 25433 at block/genhd.c:821 __device_add_disk+0xe7c/0x11d0 [ 750.504391][T25433] Modules linked in: [ 750.508436][T25433] CPU: 1 PID: 25433 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 750.520189][T25433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 750.530280][T25433] RIP: 0010:__device_add_disk+0xe7c/0x11d0 [ 750.536223][T25433] Code: ff ff e8 b7 ee 2b ff 0f 0b e9 28 f3 ff ff e8 ab ee 2b ff 0f 0b 42 80 3c 33 00 0f 85 db f8 ff ff e9 de f8 ff ff e8 94 ee 2b ff <0f> 0b e9 60 f7 ff ff e8 88 ee 2b ff e9 13 ff ff ff 44 89 f1 80 e1 [ 750.555883][T25433] RSP: 0018:ffffc900080b7bc0 EFLAGS: 00010246 [ 750.561939][T25433] RAX: ffffffff8241331c RBX: 00000000fffffff4 RCX: 0000000000040000 [ 750.569956][T25433] RDX: ffffc9000153d000 RSI: 000000000003ffff RDI: 0000000000040000 [ 750.577947][T25433] RBP: ffffc900080b7d08 R08: ffffffff82412a76 R09: ffffc900080b7610 [ 750.585945][T25433] R10: 0000000000000013 R11: ffffffff84c00596 R12: 0000000000000007 [ 750.593929][T25433] R13: ffff88815cc3d000 R14: ffff888112f8e338 R15: ffff888112f8e000 [ 750.601898][T25433] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 750.610849][T25433] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 750.617453][T25433] CR2: 0000555556f6f728 CR3: 00000001002ab000 CR4: 00000000003506a0 [ 750.625507][T25433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 750.633547][T25433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 750.641527][T25433] Call Trace: [ 750.645033][T25433] ? device_add_disk+0x40/0x40 [ 750.649833][T25433] ? loop_add+0x400/0x760 [ 750.654195][T25433] ? vsprintf+0x40/0x40 [ 750.658448][T25433] device_add_disk+0x2a/0x40 [ 750.663066][T25433] loop_add+0x58f/0x760 [ 750.667235][T25433] loop_control_ioctl+0x564/0x740 [ 750.672305][T25433] ? loop_remove+0xb0/0xb0 [ 750.676745][T25433] ? __fget_files+0x310/0x370 [ 750.681418][T25433] ? security_file_ioctl+0xb1/0xd0 [ 750.686579][T25433] ? loop_remove+0xb0/0xb0 [ 750.691014][T25433] __se_sys_ioctl+0x115/0x190 [ 750.695744][T25433] __x64_sys_ioctl+0x7b/0x90 [ 750.700330][T25433] do_syscall_64+0x34/0x70 [ 750.704856][T25433] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 750.710821][T25433] RIP: 0033:0x7fb457f980f9 [ 750.715260][T25433] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 750.734894][T25433] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 750.743333][T25433] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 750.751304][T25433] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 750.759302][T25433] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 750.767286][T25433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 750.775279][T25433] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 750.783266][T25433] ---[ end trace e057be27904f7529 ]--- 21:23:54 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:54 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs271vHEUbAPBn7+x8OXntN4SPOAGMAGHxYcdOgBQUgECiAAkJilAa24lMLjGKjUQiCwxFKCESPaJE4i+gggYBFRIt9ChShNwkUB3au137fLkzPvvsC+zvJ20yszunmWdn5252xxtAYY2k/yQRByPi14gYrGfXFxip/3drZWn6z5Wl6SSq1Tf+SGrlbq4sTedF888N5Jnlev5Yi3oXLl85P1WpzF7K8uOLF94dX7h85am5C1PnZs/NXpw8ffrUyYlnn5l8uitxpnHdHP5g/vjRV9669tr0mWtv//h1ksffFEeXjGx08NEuV9ZrhxrSSV8PG0JHyhGRdld/bfwPRjnWOm8wXv64p40DdlS1Wq3ubX94XxX4D0ui1y0AeiP/oU/vf/Ntl6Yed4QbL9RvgNK4b2Vb/UhflLIy/U33t900EhFnlv/6It1iZ55DAACs8206/3my1fyvFPc0lPtftoYyFBH/j4jDEXFXRByJiLsjamXvjYj7Oqy/eZHk9vlP6fqWAtukdP73XLa2tX7+l8/+Yqic5Q7V4u9Pzs5VZk9k52Q0+vem+YkN6vjupV8+bXescf6Xbmn9+Vwwa8f1vqYHdDNTi1PbibnRjY8ihvtaxZ+srgQkEXE0Ioa3WMfc418db3fsn+PfQBfWmapfRjxW7//laIo/l2y8Pjm+LyqzJ8bzq+J2P/189fV29W8r/i5I+/9Ay+t/Nf6hpHG9dqHzOq7+9knbe5qtXv97kjdr6T3ZvvenFhcvTUTsSV7N9j+/tn9y7bN5Pi+fxj/6cOvxfzjWzsSxiEgv4vsj4oGIeDBr+0MRMfDZxvH/8OIj72w9/p2Vxj/TUf93niif//6bdZUOdRJ/2v+naqnRbM9mvv8228Dtnj8AAAD4NyhFxMFISmOr6VJpbKz+N/xH4kCpMr+w+MTZ+fcuztTfERiK/lL+pGuw4XnoRHZbn+cnm/Ins+fGn5f31/Jj0/OVmV4HDwU30Gb8p34v97p1wI7zvhYUl/EPxWX8Q3EZ/1BcLcb//l60A9h9rX7/P+xBO4DdZ/4PxWX8Q3EZ/1Bcxj8U0nbe65cociJKd0QzJHYo0etvJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO74OwAA///RqeZ6") 21:23:54 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) write$binfmt_elf64(r3, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x5, 0x1f, 0x3f, 0xffff, 0x2, 0x3, 0xffffffe1, 0x29c, 0x40, 0x143, 0x800, 0x7ff, 0x38, 0x2, 0x2, 0x7fff, 0x42}, [{0x1, 0x98, 0x6, 0x5, 0x7fffffffffffffff, 0x20, 0x2, 0x9}], "fbc7c8b8e5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x77d) 21:23:54 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 56) 21:23:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x9}, @empty}}) 21:23:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xa}, @empty}}) 21:23:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x2}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:54 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = gettid() connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r6, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1f3cd45b4043b97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) sendmsg$netlink(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20008}, 0xc, &(0x7f0000000240)=[{&(0x7f00000001c0)={0x10, 0x3f, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r9}}}], 0x20, 0x200080c4}, 0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xb}, @empty}}) 21:23:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xc}, @empty}}) 21:23:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xd}, @empty}}) [ 750.943763][T25450] FAULT_INJECTION: forcing a failure. [ 750.943763][T25450] name failslab, interval 1, probability 0, space 0, times 0 [ 750.956823][T25450] CPU: 1 PID: 25450 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 750.968545][T25450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 750.978706][T25450] Call Trace: [ 750.982029][T25450] dump_stack_lvl+0x1e2/0x24b [ 750.986719][T25450] ? panic+0x7d7/0x7d7 [ 750.990788][T25450] ? bfq_pos_tree_add_move+0x43e/0x43e [ 750.996244][T25450] dump_stack+0x15/0x17 [ 751.000396][T25450] should_fail+0x3c0/0x510 [ 751.004800][T25450] ? kobject_get_path+0xb8/0x1a0 [ 751.009728][T25450] __should_failslab+0x9f/0xe0 [ 751.014486][T25450] should_failslab+0x9/0x20 [ 751.018992][T25450] __kmalloc+0x60/0x360 [ 751.023141][T25450] kobject_get_path+0xb8/0x1a0 [ 751.027892][T25450] kobject_uevent_env+0x282/0x730 [ 751.032906][T25450] ? __kasan_check_write+0x14/0x20 [ 751.038006][T25450] kobject_uevent+0x1f/0x30 [ 751.042501][T25450] device_add+0x79c/0xbd0 [ 751.046817][T25450] device_create+0x258/0x2e0 [ 751.051398][T25450] ? root_device_unregister+0x80/0x80 [ 751.056767][T25450] ? sched_clock_cpu+0x1b/0x3b0 [ 751.061604][T25450] bdi_register_va+0x94/0x600 [ 751.066274][T25450] bdi_register+0xd1/0x120 [ 751.070675][T25450] ? irqentry_exit+0x50/0x60 [ 751.075263][T25450] ? sysvec_apic_timer_interrupt+0xcb/0xe0 [ 751.081059][T25450] ? __device_add_disk+0x536/0x11d0 [ 751.086242][T25450] ? bdi_register_va+0x600/0x600 [ 751.091166][T25450] ? __kasan_check_read+0x11/0x20 [ 751.096177][T25450] ? blk_alloc_devt+0xd4/0x320 [ 751.100931][T25450] __device_add_disk+0x5cb/0x11d0 [ 751.105948][T25450] ? device_add_disk+0x40/0x40 [ 751.110699][T25450] ? loop_add+0x400/0x760 [ 751.115017][T25450] ? vsprintf+0x40/0x40 [ 751.119163][T25450] device_add_disk+0x2a/0x40 [ 751.123757][T25450] loop_add+0x58f/0x760 [ 751.127901][T25450] loop_control_ioctl+0x564/0x740 [ 751.132930][T25450] ? loop_remove+0xb0/0xb0 [ 751.137346][T25450] ? __fget_files+0x310/0x370 [ 751.142022][T25450] ? security_file_ioctl+0xb1/0xd0 [ 751.147126][T25450] ? loop_remove+0xb0/0xb0 [ 751.151531][T25450] __se_sys_ioctl+0x115/0x190 [ 751.156196][T25450] __x64_sys_ioctl+0x7b/0x90 [ 751.160774][T25450] do_syscall_64+0x34/0x70 [ 751.165199][T25450] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 751.171092][T25450] RIP: 0033:0x7fb457f980f9 [ 751.175501][T25450] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 751.195095][T25450] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.203604][T25450] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 751.211570][T25450] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 751.219530][T25450] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.227488][T25450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 751.235454][T25450] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 751.276669][T25451] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 751.277208][T25448] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 751.289407][T25451] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 751.301542][T25448] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 751.314077][T25451] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 751.326332][T25448] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:55 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xe}, @empty}}) 21:23:55 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:55 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 57) 21:23:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x29}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x10}, @empty}}) 21:23:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x11}, @empty}}) 21:23:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x2900}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 751.454371][T25480] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 751.474345][T25475] FAULT_INJECTION: forcing a failure. [ 751.474345][T25475] name failslab, interval 1, probability 0, space 0, times 0 [ 751.491427][T25475] CPU: 0 PID: 25475 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 751.503151][T25475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 751.513208][T25475] Call Trace: [ 751.516507][T25475] dump_stack_lvl+0x1e2/0x24b [ 751.521203][T25475] ? panic+0x7d7/0x7d7 [ 751.525290][T25475] ? bfq_pos_tree_add_move+0x43e/0x43e [ 751.530754][T25475] dump_stack+0x15/0x17 [ 751.534915][T25475] should_fail+0x3c0/0x510 [ 751.539335][T25475] ? kobject_get_path+0xb8/0x1a0 [ 751.544272][T25475] __should_failslab+0x9f/0xe0 [ 751.549039][T25475] should_failslab+0x9/0x20 [ 751.553547][T25475] __kmalloc+0x60/0x360 [ 751.557777][T25475] kobject_get_path+0xb8/0x1a0 [ 751.562547][T25475] kobject_uevent_env+0x282/0x730 [ 751.567578][T25475] ? __kasan_check_write+0x14/0x20 [ 751.572687][T25475] kobject_uevent+0x1f/0x30 [ 751.577218][T25475] device_add+0x79c/0xbd0 [ 751.581549][T25475] device_create+0x258/0x2e0 [ 751.586129][T25475] ? root_device_unregister+0x80/0x80 [ 751.591578][T25475] ? number+0xd9b/0x1040 [ 751.595808][T25475] bdi_register_va+0x94/0x600 [ 751.600488][T25475] bdi_register+0xd1/0x120 [ 751.604889][T25475] ? __device_add_disk+0x536/0x11d0 [ 751.610076][T25475] ? bdi_register_va+0x600/0x600 [ 751.615000][T25475] ? vsnprintf+0x1bfd/0x1cd0 [ 751.619576][T25475] ? __kasan_check_read+0x11/0x20 [ 751.624584][T25475] ? blk_alloc_devt+0xd4/0x320 [ 751.629379][T25475] __device_add_disk+0x5cb/0x11d0 [ 751.634389][T25475] ? device_add_disk+0x40/0x40 [ 751.639148][T25475] ? loop_add+0x400/0x760 [ 751.643494][T25475] ? vsprintf+0x40/0x40 [ 751.647636][T25475] device_add_disk+0x2a/0x40 [ 751.652208][T25475] loop_add+0x58f/0x760 [ 751.656364][T25475] loop_control_ioctl+0x564/0x740 [ 751.661375][T25475] ? loop_remove+0xb0/0xb0 [ 751.665789][T25475] ? __fget_files+0x310/0x370 [ 751.670449][T25475] ? security_file_ioctl+0xb1/0xd0 [ 751.675542][T25475] ? loop_remove+0xb0/0xb0 [ 751.679941][T25475] __se_sys_ioctl+0x115/0x190 [ 751.684603][T25475] __x64_sys_ioctl+0x7b/0x90 [ 751.689175][T25475] do_syscall_64+0x34/0x70 [ 751.693577][T25475] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 751.699463][T25475] RIP: 0033:0x7fb457f980f9 [ 751.703862][T25475] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 751.723457][T25475] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 751.731877][T25475] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 751.739833][T25475] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 751.747802][T25475] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 751.755801][T25475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 751.763759][T25475] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 751.800075][T25484] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 751.804708][T25473] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 751.820363][T25484] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 751.824892][T25473] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 751.837677][T25484] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 751.850002][T25473] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 21:23:55 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 58) 21:23:55 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast1, @in6=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = gettid() connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r6, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f0000000d80)) (async) fstat(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1f3cd45b4043b97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="b4a3f6b71893d755342fddcbd63d02d5eb43e3fe1dd4f41cdde18b1b800e33ec36281639138fb324cb157c2d0b8890f468b1e93f38a58cc06a15e58a7b072e88a4f00a201180f3828e25f9ad212f128a2f5abf91514b641868e1622f90b9ca35f6f4c2ac6a652965e53a93e7eb1cbe347e57378ef5f94063316c94e6f82d0bed5bbcb3fa68502cd77283bf919ea56e419f85bdf74ae06ad5d5f9caed0281cd11ab53725c66ca277e16a9a678bc65d9d864f348f8aaa06c83008edcbfbfc51452f130bd82d060ea3aff5f8aa4a84cc33873e02e9fbfc2f18f5141d4f455c95ee9c745236806b0bba7a0f613d64a58c51cc1e9bc5489cf13dbac760b5ac9f0865f8c714eb45ab71a3aea475d4d6f2729fc24348fa116299a8f798d7b91499ecb22c6fa407953aad5fceeb2ea2393067d128579df8b", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) sendmsg$netlink(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20008}, 0xc, &(0x7f0000000240)=[{&(0x7f00000001c0)={0x10, 0x3f, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r9}}}], 0x20, 0x200080c4}, 0x801) (async) sendmsg$netlink(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20008}, 0xc, &(0x7f0000000240)=[{&(0x7f00000001c0)={0x10, 0x3f, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r9}}}], 0x20, 0x200080c4}, 0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:23:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:55 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:55 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:55 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x12}, @empty}}) 21:23:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x300}, @empty}}) 21:23:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x2}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x500}, @empty}}) 21:23:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x600}, @empty}}) 21:23:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x700}, @empty}}) 21:23:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x900}, @empty}}) [ 752.145336][T25496] FAULT_INJECTION: forcing a failure. [ 752.145336][T25496] name failslab, interval 1, probability 0, space 0, times 0 [ 752.158493][T25496] CPU: 0 PID: 25496 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 752.170226][T25496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 752.180323][T25496] Call Trace: [ 752.183632][T25496] dump_stack_lvl+0x1e2/0x24b [ 752.188325][T25496] ? bfq_pos_tree_add_move+0x43e/0x43e [ 752.193833][T25496] ? vsnprintf+0x1bfd/0x1cd0 [ 752.198452][T25496] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 752.204523][T25496] dump_stack+0x15/0x17 [ 752.208667][T25496] should_fail+0x3c0/0x510 [ 752.213073][T25496] __should_failslab+0x9f/0xe0 [ 752.217824][T25496] should_failslab+0x9/0x20 [ 752.222324][T25496] kmem_cache_alloc+0x3f/0x300 [ 752.227076][T25496] ? __alloc_skb+0x7e/0x580 [ 752.231561][T25496] ? add_uevent_var+0x269/0x440 [ 752.236399][T25496] __alloc_skb+0x7e/0x580 [ 752.240725][T25496] alloc_uevent_skb+0x7f/0x230 [ 752.245477][T25496] kobject_uevent_net_broadcast+0x321/0x5a0 [ 752.251380][T25496] kobject_uevent_env+0x540/0x730 [ 752.256405][T25496] kobject_uevent+0x1f/0x30 [ 752.260926][T25496] device_add+0x79c/0xbd0 [ 752.265329][T25496] device_create+0x258/0x2e0 [ 752.269907][T25496] ? root_device_unregister+0x80/0x80 [ 752.275266][T25496] ? number+0xd9b/0x1040 [ 752.279503][T25496] bdi_register_va+0x94/0x600 [ 752.284179][T25496] bdi_register+0xd1/0x120 [ 752.288592][T25496] ? __device_add_disk+0x536/0x11d0 [ 752.293780][T25496] ? bdi_register_va+0x600/0x600 [ 752.298710][T25496] ? vsnprintf+0x1bfd/0x1cd0 [ 752.303290][T25496] ? __kasan_check_read+0x11/0x20 [ 752.308489][T25496] ? blk_alloc_devt+0xd4/0x320 [ 752.313245][T25496] __device_add_disk+0x5cb/0x11d0 [ 752.318267][T25496] ? device_add_disk+0x40/0x40 [ 752.323128][T25496] ? loop_add+0x400/0x760 [ 752.327446][T25496] ? vsprintf+0x40/0x40 [ 752.331603][T25496] device_add_disk+0x2a/0x40 [ 752.336182][T25496] loop_add+0x58f/0x760 [ 752.340336][T25496] loop_control_ioctl+0x564/0x740 [ 752.345354][T25496] ? loop_remove+0xb0/0xb0 [ 752.349762][T25496] ? __fget_files+0x310/0x370 [ 752.354449][T25496] ? security_file_ioctl+0xb1/0xd0 [ 752.359575][T25496] ? loop_remove+0xb0/0xb0 [ 752.363989][T25496] __se_sys_ioctl+0x115/0x190 [ 752.368672][T25496] __x64_sys_ioctl+0x7b/0x90 [ 752.373254][T25496] do_syscall_64+0x34/0x70 [ 752.377666][T25496] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 752.383546][T25496] RIP: 0033:0x7fb457f980f9 [ 752.387971][T25496] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 752.407580][T25496] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.416009][T25496] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 752.423974][T25496] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 752.431955][T25496] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 752.439920][T25496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 752.447885][T25496] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 752.480329][T25500] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr 21:23:56 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 59) [ 752.499038][T25499] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 752.505523][T25500] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 752.511886][T25499] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 752.536370][T25499] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 752.543734][T25500] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 752.562732][T25523] FAULT_INJECTION: forcing a failure. [ 752.562732][T25523] name failslab, interval 1, probability 0, space 0, times 0 [ 752.575799][T25523] CPU: 1 PID: 25523 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 752.587518][T25523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 752.597570][T25523] Call Trace: [ 752.600866][T25523] dump_stack_lvl+0x1e2/0x24b [ 752.605545][T25523] ? panic+0x7d7/0x7d7 [ 752.609622][T25523] ? bfq_pos_tree_add_move+0x43e/0x43e [ 752.615108][T25523] dump_stack+0x15/0x17 [ 752.619268][T25523] should_fail+0x3c0/0x510 [ 752.623686][T25523] ? alloc_uevent_skb+0x7f/0x230 [ 752.628745][T25523] __should_failslab+0x9f/0xe0 [ 752.633514][T25523] should_failslab+0x9/0x20 [ 752.638043][T25523] __kmalloc_track_caller+0x5f/0x350 [ 752.643350][T25523] ? kmem_cache_alloc+0x1a4/0x300 [ 752.648393][T25523] ? __alloc_skb+0x7e/0x580 [ 752.652901][T25523] ? alloc_uevent_skb+0x7f/0x230 [ 752.657842][T25523] __alloc_skb+0xbe/0x580 [ 752.662178][T25523] alloc_uevent_skb+0x7f/0x230 [ 752.666947][T25523] kobject_uevent_net_broadcast+0x321/0x5a0 [ 752.672839][T25523] kobject_uevent_env+0x540/0x730 [ 752.677866][T25523] kobject_uevent+0x1f/0x30 [ 752.682367][T25523] device_add+0x79c/0xbd0 [ 752.686697][T25523] device_create+0x258/0x2e0 [ 752.691294][T25523] ? root_device_unregister+0x80/0x80 [ 752.696669][T25523] ? number+0xd9b/0x1040 [ 752.700920][T25523] bdi_register_va+0x94/0x600 [ 752.705602][T25523] bdi_register+0xd1/0x120 [ 752.710019][T25523] ? __device_add_disk+0x536/0x11d0 [ 752.715220][T25523] ? bdi_register_va+0x600/0x600 [ 752.720161][T25523] ? vsnprintf+0x1bfd/0x1cd0 [ 752.724756][T25523] ? __kasan_check_read+0x11/0x20 [ 752.729790][T25523] ? blk_alloc_devt+0xd4/0x320 [ 752.734587][T25523] __device_add_disk+0x5cb/0x11d0 [ 752.739619][T25523] ? device_add_disk+0x40/0x40 [ 752.744471][T25523] ? loop_add+0x400/0x760 [ 752.748800][T25523] ? vsprintf+0x40/0x40 [ 752.752958][T25523] device_add_disk+0x2a/0x40 [ 752.757553][T25523] loop_add+0x58f/0x760 [ 752.761715][T25523] loop_control_ioctl+0x564/0x740 [ 752.766739][T25523] ? loop_remove+0xb0/0xb0 [ 752.771156][T25523] ? __fget_files+0x310/0x370 [ 752.775836][T25523] ? security_file_ioctl+0xb1/0xd0 [ 752.780944][T25523] ? loop_remove+0xb0/0xb0 [ 752.785364][T25523] __se_sys_ioctl+0x115/0x190 [ 752.790040][T25523] __x64_sys_ioctl+0x7b/0x90 [ 752.794629][T25523] do_syscall_64+0x34/0x70 [ 752.799057][T25523] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 752.804947][T25523] RIP: 0033:0x7fb457f980f9 [ 752.809367][T25523] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 752.828977][T25523] RSP: 002b:00007fb456cea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.837400][T25523] RAX: ffffffffffffffda RBX: 00007fb4580b8050 RCX: 00007fb457f980f9 [ 752.845377][T25523] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 752.853349][T25523] RBP: 00007fb456cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 752.861325][T25523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 752.869300][T25523] R13: 00007ffeb359550f R14: 00007fb456cea300 R15: 0000000000022000 21:23:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x29}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xa00}, @empty}}) 21:23:56 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 60) 21:23:56 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:56 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = gettid() connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r6, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1f3cd45b4043b97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) sendmsg$netlink(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20008}, 0xc, &(0x7f0000000240)=[{&(0x7f00000001c0)={0x10, 0x3f, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r9}}}], 0x20, 0x200080c4}, 0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) pipe(&(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast1, @in6=@empty}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) (async) getpid() (async) sched_setscheduler(r4, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) gettid() (async) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) fstat(r6, &(0x7f0000000a80)) (async) fstat(r6, &(0x7f0000000d80)) (async) sendmmsg$unix(r5, &(0x7f0000001180)=[{{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000003c0)="c1b42d002e988d486f776d3058f6291e90e59b4d1982d710f9bbee", 0x1b}, {&(0x7f0000000740)="50796f3e7835e5fce5935b8ae581d6756df0b8e6e05e4ac385ea12e3eb4ef66b8cc184eb4a9134e186c95bf58c3d", 0x2e}, {&(0x7f0000000780)="f299c7fa22165c1cecc1fa49a4d1650a86b1b1352417bec5c734b119e4b306d2a823204bb0d11bf69a47c412d18e6bc8ec74115e916b7b303795", 0x3a}], 0x3, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xee01}}}], 0x60, 0x20004805}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="5dbd3ef518f0eef8045b4e1b4e689f9eaa7a44e6e65a17c8673440e7a6cd31a72aa051bc58f540228edf0224537452a812b2370023ffd90929bfb00d28b86a30c979cf815388e49d4d8d8644d8145761b009c2445ddc0722a812b2eb9a0046117ebb6074f43a1085be8dd18bb08b341d9933188b9f743ec48a67", 0x7a}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)="85b3c631d17cb70ad4f8556028ae98cdcfa5e63c319634e95caa37a8c285735ebb1f66c7ee60fd3edc509c242db983d2260631aa0e622332d8fb48a1dd6307859606c9694149f0bf5b95e1e72684c7577aca5b604dc4781ab7f8eb8bb1fd6bd93e8fc377ff8a3e8a202840775b47e805923f86b629eac4ecd55b941b109688e4314482a280de9857a20478e3163495d9d7788ba48e51e190de22c365eb87ff071428fe689e7930fb78fccdcf409a0f88657ca52b19e4d48ee7982cb1f35141d5438d318310ba06d96461373df5b7ebb82a2d4f15cfa9baf3deea03caec258c914ebaa1208e5c", 0xe6}, {&(0x7f0000000940)="33dfc554a9ab1fb033c903e41bbf8d5707a3c1a5c04a17e071ccb6bd79", 0x1d}, {&(0x7f0000000cc0)="8c16948fe30e8b502776748d293090efe698064c12f48a7a4e0cb434724cdadfbd13fc0d13dd00c3c20ad8d9d8c1020cb1cef7078746cc32e3f297832e8f6f191aa52e8b1f0d1baca60da1df96d4cc7289e72bbc03f7e47b2c66ec1579cce7b45cc4774186a7dd8107c7875c747f44078b550a750aa80d93b6eb52ddf1e3f78789fafff85a6f29449a5c", 0x8a}, {0xfffffffffffffffc}], 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32, @ANYRES32=r6, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000625c31ccb9d0bfecaad1817bc51058a24730a5ba91ad5ac9e7c60b0365b708604a991cb189041898502bd9f234f29e77f2f092a212c0918c5d507c7e8093757f06368096d807ad196a12b5aef732a28575", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x8001}}, {{&(0x7f0000000ec0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000f40)="14f16ac4c5d1f3cd45b4043b97", 0xd}, {&(0x7f0000000f80)="48f5eab2cdc10d293cdb28de6a18cb0008e4d62adb3b826c9e24056c1449d8d3cb2656d8ff7f962343d485903ee77b428a8346e75dcd3a9ce298668dfdc75c53659ebd5db64476200e4a451c5a573822c783914b5f13622cd910ba4629a677633b95f27228b199c4cb36955c91e35d1d5650e6c73924f2d58abe", 0x7a}, {&(0x7f0000001400)="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", 0x134}, {&(0x7f00000010c0)="8031bc5e9db312e553ce8ce59c2bd0785a6396edef58179ee985b170d501427c88d2652188d9987e9c12c045786ea6c3a2d00f9ac8956c13f8098fbf949d29a24cb65a52404cd2610a95230d93e80563f7d431c144a70c73e4b395ee356f5ba0ffa1f13438c450f40b2d33d747e2", 0x6e}], 0x4, 0x0, 0x0, 0x2401c804}}], 0x4, 0x80) (async) sendmsg$netlink(r1, &(0x7f0000000400)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x20008}, 0xc, &(0x7f0000000240)=[{&(0x7f00000001c0)={0x10, 0x3f, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x10}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3, r9}}}], 0x20, 0x200080c4}, 0x801) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) (async) 21:23:56 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xb00}, @empty}}) 21:23:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x2900}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xc00}, @empty}}) 21:23:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xd00}, @empty}}) [ 753.001796][T25534] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 753.016259][T25534] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 753.029389][T25534] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 753.042336][T25532] FAULT_INJECTION: forcing a failure. 21:23:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xe00}, @empty}}) 21:23:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x1100}, @empty}}) 21:23:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x1200}, @empty}}) 21:23:56 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x1000000}, @empty}}) [ 753.042336][T25532] name failslab, interval 1, probability 0, space 0, times 0 [ 753.055137][T25532] CPU: 0 PID: 25532 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 753.066853][T25532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 753.076904][T25532] Call Trace: [ 753.080211][T25532] dump_stack_lvl+0x1e2/0x24b [ 753.084901][T25532] ? bfq_pos_tree_add_move+0x43e/0x43e [ 753.090371][T25532] dump_stack+0x15/0x17 [ 753.094541][T25532] should_fail+0x3c0/0x510 [ 753.098995][T25532] __should_failslab+0x9f/0xe0 [ 753.103766][T25532] should_failslab+0x9/0x20 [ 753.108269][T25532] kmem_cache_alloc+0x3f/0x300 [ 753.113013][T25532] ? skb_clone+0x1d6/0x3b0 [ 753.117418][T25532] skb_clone+0x1d6/0x3b0 [ 753.121642][T25532] netlink_broadcast_filtered+0x654/0x1200 [ 753.127430][T25532] netlink_broadcast+0x3a/0x50 [ 753.132183][T25532] kobject_uevent_net_broadcast+0x3b1/0x5a0 [ 753.138062][T25532] kobject_uevent_env+0x540/0x730 [ 753.143069][T25532] kobject_uevent+0x1f/0x30 [ 753.147551][T25532] device_add+0x79c/0xbd0 [ 753.151873][T25532] device_create+0x258/0x2e0 [ 753.156452][T25532] ? root_device_unregister+0x80/0x80 [ 753.161802][T25532] ? number+0xd9b/0x1040 [ 753.166023][T25532] bdi_register_va+0x94/0x600 [ 753.170695][T25532] bdi_register+0xd1/0x120 [ 753.175095][T25532] ? __device_add_disk+0x536/0x11d0 [ 753.180282][T25532] ? bdi_register_va+0x600/0x600 [ 753.185197][T25532] ? vsnprintf+0x1bfd/0x1cd0 [ 753.189769][T25532] ? __kasan_check_read+0x11/0x20 [ 753.194772][T25532] ? blk_alloc_devt+0xd4/0x320 [ 753.199524][T25532] __device_add_disk+0x5cb/0x11d0 [ 753.204531][T25532] ? device_add_disk+0x40/0x40 [ 753.209372][T25532] ? loop_add+0x400/0x760 [ 753.213686][T25532] ? vsprintf+0x40/0x40 [ 753.217858][T25532] device_add_disk+0x2a/0x40 [ 753.222440][T25532] loop_add+0x58f/0x760 [ 753.226585][T25532] loop_control_ioctl+0x564/0x740 [ 753.231603][T25532] ? loop_remove+0xb0/0xb0 [ 753.236017][T25532] ? __fget_files+0x310/0x370 [ 753.240692][T25532] ? security_file_ioctl+0xb1/0xd0 [ 753.245805][T25532] ? loop_remove+0xb0/0xb0 [ 753.250213][T25532] __se_sys_ioctl+0x115/0x190 [ 753.254877][T25532] __x64_sys_ioctl+0x7b/0x90 [ 753.259452][T25532] do_syscall_64+0x34/0x70 [ 753.263853][T25532] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 753.269725][T25532] RIP: 0033:0x7fb457f980f9 [ 753.274124][T25532] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 753.293727][T25532] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:23:57 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 61) [ 753.302125][T25532] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 753.310077][T25532] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 753.318034][T25532] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 753.325991][T25532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 753.333947][T25532] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 753.405037][T25536] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 753.433876][T25536] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 753.449758][T25536] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 753.466407][T25562] FAULT_INJECTION: forcing a failure. [ 753.466407][T25562] name failslab, interval 1, probability 0, space 0, times 0 [ 753.479195][T25562] CPU: 0 PID: 25562 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 753.490919][T25562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 753.500996][T25562] Call Trace: [ 753.504337][T25562] dump_stack_lvl+0x1e2/0x24b [ 753.509024][T25562] ? bfq_pos_tree_add_move+0x43e/0x43e [ 753.514503][T25562] ? kmem_cache_free+0xa9/0x1f0 [ 753.518035][T25564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 753.519363][T25562] dump_stack+0x15/0x17 [ 753.519378][T25562] should_fail+0x3c0/0x510 [ 753.519400][T25562] __should_failslab+0x9f/0xe0 [ 753.542012][T25562] should_failslab+0x9/0x20 [ 753.546525][T25562] kmem_cache_alloc+0x3f/0x300 [ 753.551301][T25562] ? __d_alloc+0x2d/0x6b0 [ 753.555654][T25562] __d_alloc+0x2d/0x6b0 [ 753.559832][T25562] ? avc_has_perm_noaudit+0x358/0x4c0 [ 753.565310][T25562] d_alloc_parallel+0xe6/0x1330 [ 753.570172][T25562] ? avc_has_perm_noaudit+0x2ed/0x4c0 [ 753.575551][T25562] ? avc_denied+0x1b0/0x1b0 [ 753.580066][T25562] ? kfree+0xc3/0x290 [ 753.584059][T25562] ? d_hash_and_lookup+0x200/0x200 [ 753.589223][T25562] ? selinux_inode_permission+0x439/0x670 [ 753.594953][T25562] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 753.600771][T25562] ? kobject_uevent_env+0x348/0x730 [ 753.605986][T25562] __lookup_slow+0x14e/0x400 [ 753.610588][T25562] ? __d_lookup+0x4da/0x530 [ 753.615110][T25562] ? lookup_one_len+0x6a0/0x6a0 [ 753.619975][T25562] lookup_one_len+0x43d/0x6a0 [ 753.624666][T25562] ? try_lookup_one_len+0x660/0x660 [ 753.629873][T25562] ? device_create+0x2bc/0x2e0 [ 753.634642][T25562] ? mntput+0x63/0xc0 [ 753.638639][T25562] start_creating+0x166/0x320 [ 753.643345][T25562] debugfs_create_dir+0x27/0x450 [ 753.648353][T25562] bdi_register_va+0x260/0x600 [ 753.653132][T25562] bdi_register+0xd1/0x120 [ 753.657562][T25562] ? __device_add_disk+0x536/0x11d0 [ 753.662766][T25562] ? bdi_register_va+0x600/0x600 [ 753.667710][T25562] ? vsnprintf+0x1bfd/0x1cd0 [ 753.672314][T25562] ? __kasan_check_read+0x11/0x20 [ 753.677348][T25562] ? blk_alloc_devt+0xd4/0x320 [ 753.682124][T25562] __device_add_disk+0x5cb/0x11d0 [ 753.687162][T25562] ? device_add_disk+0x40/0x40 [ 753.691935][T25562] ? loop_add+0x400/0x760 [ 753.696287][T25562] ? vsprintf+0x40/0x40 [ 753.700458][T25562] device_add_disk+0x2a/0x40 [ 753.705062][T25562] loop_add+0x58f/0x760 [ 753.709226][T25562] loop_control_ioctl+0x564/0x740 [ 753.714259][T25562] ? loop_remove+0xb0/0xb0 [ 753.718687][T25562] ? __fget_files+0x310/0x370 [ 753.723379][T25562] ? security_file_ioctl+0xb1/0xd0 [ 753.728504][T25562] ? loop_remove+0xb0/0xb0 [ 753.732943][T25562] __se_sys_ioctl+0x115/0x190 [ 753.737625][T25562] __x64_sys_ioctl+0x7b/0x90 [ 753.742211][T25562] do_syscall_64+0x34/0x70 [ 753.746638][T25562] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 753.752525][T25562] RIP: 0033:0x7fb457f980f9 [ 753.756938][T25562] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 753.776540][T25562] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 753.784984][T25562] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 753.792955][T25562] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 21:23:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x2000000}, @empty}}) 21:23:57 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs289vFFUcAPDv7LZFKNiK+IOCWqPGxh8tLagcPIjRxIMmJnrAY90WUlmooTUR0mj1gEcl8W48mvgXeNKLUU8mXvVuSIjpBfS0ZnZn2u2yW7vttovs55MMvDfzNu99583bfTOvE0DPGk3/SSL2R8TvETFUy64vMFr77+bKUunvlaVSEpXKW38l1XI3VpZKedH8c4N5ZrmWP9Kk3oVLl89Nl8uzF7P8xOL59ycWLl1+du789NnZs7MXpk6ePHF88oXnp57rSJxpXDdGPpo/evi1d66+UTp99d2fv03y+Bvi6JDRjQ4+0eHKuu1AXTrp62JDaEsxItLu6q+O/6EoxlrnDcWrn3a1ccCOqlQqlT2tDy9XgDtYEt1uAdAd+Q99ev+bb7s09bgtXD8VUcriv5lttSN9UcjK9Dfc33bSaEScXv7nq3SLnXkOAQCwzvenIuKZZvO/QtxfV+7ubA1lOCLuiYiDEXFvRByKiPsiqmUfiIgH26y/cZHk1vlP4dqWAtukdP73Yra2tX7+l8/+YriY5Q5U4+9PzsyVZ49l52Qs+vek+ckN6vjhld8+b3Wsfv6Xbmn9+Vwwa8e1voYHdDPTi9Pbibne9U8iRvqaxZ+srgQkEXE4Ika2WMfcU98cbXXsv+PfQAfWmSpfRzxZ6//laIg/l2y8PjlxV5Rnj03kV8Wtfvn1yput6t9W/B2Q9v++ptf/avzDSf167UL7dVz547OW9zRbvf4Hkrer6YFs34fTi4sXJyMGktez/S+t7Z9a+2yez8un8Y891nz8H4y1M3EkItKL+KGIeDgiHsna/mhEDH6xcfw/vfz4e1uPf2el8c+01f/tJ4rnfvxuXaXD7cSf9v+Jamos27OZ77/NNnC75w8AAAD+DwoRsT+SwvhqulAYH6/9Df+h2Fcozy8sPn1m/oMLM7V3BIajv5A/6Rqqex46md3W5/mphvzx7Lnxl8W91fx4ab480+3goccNthj/qT+L3W4dsOO8rwW9y/iH3mX8Q+8y/qF3NRn/e7vRDmD3Nfv9/7gL7QB2n/k/9C7jH3qX8Q+9y/iHnrSd9/olejkRhduiGRI7lOj2NxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBn/BsAAP//iErnUQ==") [ 753.800936][T25562] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 753.808918][T25562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 753.816892][T25562] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:57 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:57 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1bcedbeec23ecff71d827e1f4dcdd150dabe999d9d44ed659a46a0769834c2c505d1716416132c841372b1d16fd0cfbb61788a1f6a4db434bc97bc0b4e0385a09ba35930ac0846b8bfa5cd931333b5fb872bca7b98b1864de04d3856c774650002f672108b5add5868919f06d3025a0f7ce2dca84ef26d23b11cae346b507cd2a0ae45213cebc9e772034128c050bb98fe2840035973424f9e27d1cc0b80a0ca4085636d670161fdd862e70300fbc13eb2ac0a3d617d43300b5033cfc72257b908819e420696"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100804b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = signalfd(r1, &(0x7f00000000c0)={[0x8000000000000000]}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x8, 0x2, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010001fff8c0200"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r5, @ANYBLOB="08000a16", @ANYRES32=r5, @ANYBLOB="95e32da72a42b4e5612c4c27fec861940fb671787256e5d6e37cbaccb9b591ce6d444ca0e4ff996b178c80ec505d688daa47e813c098de72cc40c0e7971e41a3346a8607efa3247b7fbe01ec739d5bd19c0077daf662cdb306691cf6c06196c47523b99c42cb4bbae554c45e5c70c8a47eead2c086ca5c3691483a233f10fe710d"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000001280)={'syztnl0\x00', r5, 0x29, 0x9, 0x1f, 0x0, 0x50, @private0={0xfc, 0x0, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x20, 0xffffffff, 0x7}}) socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x43, 0x4}, [@NDA_IFINDEX={0x8, 0x8, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40815}, 0x400c0) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) 21:23:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x3000000}, @empty}}) 21:23:57 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 62) 21:23:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x0, 0x2}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x4000000}, @empty}}) [ 753.932197][T25585] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 753.968630][T25585] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) 21:23:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x5000000}, @empty}}) 21:23:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x6000000}, @empty}}) [ 753.988236][T25585] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 753.999260][T25593] FAULT_INJECTION: forcing a failure. [ 753.999260][T25593] name failslab, interval 1, probability 0, space 0, times 0 [ 754.021534][T25602] device gretap22 entered promiscuous mode [ 754.031628][T25593] CPU: 0 PID: 25593 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 754.043362][T25593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 754.053686][T25593] Call Trace: [ 754.057009][T25593] dump_stack_lvl+0x1e2/0x24b [ 754.061697][T25593] ? panic+0x7d7/0x7d7 [ 754.065781][T25593] ? bfq_pos_tree_add_move+0x43e/0x43e [ 754.071252][T25593] ? __lookup_slow+0x2f7/0x400 [ 754.076021][T25593] ? lookup_one_len+0x6a0/0x6a0 [ 754.080876][T25593] dump_stack+0x15/0x17 [ 754.085045][T25593] should_fail+0x3c0/0x510 [ 754.089482][T25593] __should_failslab+0x9f/0xe0 [ 754.094265][T25593] should_failslab+0x9/0x20 [ 754.098810][T25593] kmem_cache_alloc+0x3f/0x300 [ 754.103586][T25593] ? new_inode_pseudo+0x7c/0x220 [ 754.108579][T25593] ? try_lookup_one_len+0x660/0x660 [ 754.113797][T25593] ? device_create+0x2bc/0x2e0 [ 754.118577][T25593] new_inode_pseudo+0x7c/0x220 [ 754.123357][T25593] new_inode+0x28/0x1c0 [ 754.127534][T25593] ? start_creating+0x206/0x320 [ 754.132398][T25593] debugfs_create_dir+0xf3/0x450 [ 754.137348][T25593] bdi_register_va+0x260/0x600 [ 754.142122][T25593] bdi_register+0xd1/0x120 [ 754.146574][T25593] ? __device_add_disk+0x536/0x11d0 [ 754.151784][T25593] ? bdi_register_va+0x600/0x600 [ 754.156742][T25593] ? vsnprintf+0x1bfd/0x1cd0 [ 754.161352][T25593] ? __kasan_check_read+0x11/0x20 [ 754.166393][T25593] ? blk_alloc_devt+0xd4/0x320 [ 754.171173][T25593] __device_add_disk+0x5cb/0x11d0 [ 754.176215][T25593] ? device_add_disk+0x40/0x40 [ 754.180988][T25593] ? loop_add+0x400/0x760 [ 754.185327][T25593] ? vsprintf+0x40/0x40 [ 754.189502][T25593] device_add_disk+0x2a/0x40 [ 754.194110][T25593] loop_add+0x58f/0x760 [ 754.198303][T25593] loop_control_ioctl+0x564/0x740 [ 754.203349][T25593] ? loop_remove+0xb0/0xb0 [ 754.207778][T25593] ? __fget_files+0x310/0x370 [ 754.212473][T25593] ? security_file_ioctl+0xb1/0xd0 [ 754.217623][T25593] ? loop_remove+0xb0/0xb0 [ 754.222059][T25593] __se_sys_ioctl+0x115/0x190 [ 754.226743][T25593] __x64_sys_ioctl+0x7b/0x90 [ 754.231345][T25593] do_syscall_64+0x34/0x70 [ 754.235772][T25593] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 754.241678][T25593] RIP: 0033:0x7fb457f980f9 [ 754.246109][T25593] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 754.265731][T25593] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.274164][T25593] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 754.282144][T25593] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 21:23:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x7000000}, @empty}}) 21:23:58 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 63) [ 754.290124][T25593] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 754.298106][T25593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 754.306093][T25593] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 754.325219][T25593] debugfs: out of free dentries, can not create directory '7:0' [ 754.379987][T25597] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 754.392743][T25597] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 754.405082][T25597] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:23:58 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") [ 754.440031][T25614] FAULT_INJECTION: forcing a failure. [ 754.440031][T25614] name failslab, interval 1, probability 0, space 0, times 0 [ 754.452720][T25614] CPU: 0 PID: 25614 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 754.464423][T25614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 754.474510][T25614] Call Trace: [ 754.477791][T25614] dump_stack_lvl+0x1e2/0x24b [ 754.482472][T25614] ? panic+0x7d7/0x7d7 [ 754.486524][T25614] ? bfq_pos_tree_add_move+0x43e/0x43e [ 754.491978][T25614] ? __lookup_slow+0x2f7/0x400 [ 754.496741][T25614] ? lookup_one_len+0x6a0/0x6a0 [ 754.501578][T25614] dump_stack+0x15/0x17 [ 754.505743][T25614] should_fail+0x3c0/0x510 [ 754.510170][T25614] __should_failslab+0x9f/0xe0 [ 754.514952][T25614] should_failslab+0x9/0x20 [ 754.519449][T25614] kmem_cache_alloc+0x3f/0x300 [ 754.524201][T25614] ? new_inode_pseudo+0x7c/0x220 [ 754.529129][T25614] ? try_lookup_one_len+0x660/0x660 [ 754.534315][T25614] ? device_create+0x2bc/0x2e0 [ 754.539072][T25614] new_inode_pseudo+0x7c/0x220 [ 754.543897][T25614] new_inode+0x28/0x1c0 [ 754.548049][T25614] ? start_creating+0x206/0x320 [ 754.552892][T25614] debugfs_create_dir+0xf3/0x450 [ 754.557822][T25614] bdi_register_va+0x260/0x600 [ 754.562680][T25614] bdi_register+0xd1/0x120 [ 754.567092][T25614] ? __device_add_disk+0x536/0x11d0 [ 754.572285][T25614] ? bdi_register_va+0x600/0x600 [ 754.577225][T25614] ? vsnprintf+0x1bfd/0x1cd0 [ 754.581802][T25614] ? __kasan_check_read+0x11/0x20 [ 754.586817][T25614] ? blk_alloc_devt+0xd4/0x320 [ 754.591570][T25614] __device_add_disk+0x5cb/0x11d0 [ 754.596611][T25614] ? device_add_disk+0x40/0x40 [ 754.601375][T25614] ? loop_add+0x400/0x760 [ 754.605709][T25614] ? vsprintf+0x40/0x40 [ 754.609946][T25614] device_add_disk+0x2a/0x40 [ 754.614535][T25614] loop_add+0x58f/0x760 [ 754.618690][T25614] loop_control_ioctl+0x564/0x740 [ 754.623713][T25614] ? loop_remove+0xb0/0xb0 [ 754.628158][T25614] ? __fget_files+0x310/0x370 [ 754.632914][T25614] ? security_file_ioctl+0xb1/0xd0 [ 754.638037][T25614] ? loop_remove+0xb0/0xb0 [ 754.642467][T25614] __se_sys_ioctl+0x115/0x190 [ 754.647135][T25614] __x64_sys_ioctl+0x7b/0x90 [ 754.651713][T25614] do_syscall_64+0x34/0x70 [ 754.656127][T25614] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 754.662011][T25614] RIP: 0033:0x7fb457f980f9 [ 754.666415][T25614] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 754.686012][T25614] RSP: 002b:00007fb456cea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.694417][T25614] RAX: ffffffffffffffda RBX: 00007fb4580b8050 RCX: 00007fb457f980f9 [ 754.702377][T25614] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 754.710339][T25614] RBP: 00007fb456cea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 754.718300][T25614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 754.726273][T25614] R13: 00007ffeb359550f R14: 00007fb456cea300 R15: 0000000000022000 [ 754.734618][T25614] debugfs: out of free dentries, can not create directory '7:0' 21:23:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x0, 0x29}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x8000000}, @empty}}) 21:23:58 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 64) 21:23:58 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1bcedbeec23ecff71d827e1f4dcdd150dabe999d9d44ed659a46a0769834c2c505d1716416132c841372b1d16fd0cfbb61788a1f6a4db434bc97bc0b4e0385a09ba35930ac0846b8bfa5cd931333b5fb872bca7b98b1864de04d3856c774650002f672108b5add5868919f06d3025a0f7ce2dca84ef26d23b11cae346b507cd2a0ae45213cebc9e772034128c050bb98fe2840035973424f9e27d1cc0b80a0ca4085636d670161fdd862e70300fbc13eb2ac0a3d617d43300b5033cfc72257b908819e420696"], 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100804b31901b77481e35fd008a0008"], 0x1}}, 0x0) (rerun: 32) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) r2 = signalfd(r1, &(0x7f00000000c0)={[0x8000000000000000]}, 0x8) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x8, 0x2, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010001fff8c0200"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r5, @ANYBLOB="08000a16", @ANYRES32=r5, @ANYBLOB="95e32da72a42b4e5612c4c27fec861940fb671787256e5d6e37cbaccb9b591ce6d444ca0e4ff996b178c80ec505d688daa47e813c098de72cc40c0e7971e41a3346a8607efa3247b7fbe01ec739d5bd19c0077daf662cdb306691cf6c06196c47523b99c42cb4bbae554c45e5c70c8a47eead2c086ca5c3691483a233f10fe710d"], 0x44}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000001280)={'syztnl0\x00', r5, 0x29, 0x9, 0x1f, 0x0, 0x50, @private0={0xfc, 0x0, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x20, 0xffffffff, 0x7}}) (async) socket$netlink(0x10, 0x3, 0x8) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x43, 0x4}, [@NDA_IFINDEX={0x8, 0x8, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40815}, 0x400c0) (rerun: 32) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) 21:23:58 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x0, 0x2900}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x9000000}, @empty}}) 21:23:58 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xa000000}, @empty}}) [ 754.828161][T25616] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 754.847331][T25624] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 754.856886][T25616] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 754.862874][T25624] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 754.876431][T25633] FAULT_INJECTION: forcing a failure. [ 754.876431][T25633] name failslab, interval 1, probability 0, space 0, times 0 [ 754.884347][T25624] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 754.914791][T25633] CPU: 0 PID: 25633 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 754.926545][T25633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 754.936608][T25633] Call Trace: [ 754.939919][T25633] dump_stack_lvl+0x1e2/0x24b [ 754.944615][T25633] ? bfq_pos_tree_add_move+0x43e/0x43e [ 754.950089][T25633] dump_stack+0x15/0x17 [ 754.954954][T25633] should_fail+0x3c0/0x510 [ 754.959381][T25633] __should_failslab+0x9f/0xe0 [ 754.964155][T25633] should_failslab+0x9/0x20 [ 754.968666][T25633] kmem_cache_alloc+0x3f/0x300 [ 754.973449][T25633] ? security_inode_alloc+0x29/0x140 [ 754.978744][T25633] security_inode_alloc+0x29/0x140 [ 754.983871][T25633] inode_init_always+0x710/0x970 [ 754.988819][T25633] new_inode_pseudo+0x93/0x220 [ 754.993622][T25633] new_inode+0x28/0x1c0 [ 754.997788][T25633] ? start_creating+0x206/0x320 [ 755.002659][T25633] debugfs_create_dir+0xf3/0x450 [ 755.007607][T25633] bdi_register_va+0x260/0x600 [ 755.012381][T25633] bdi_register+0xd1/0x120 [ 755.016804][T25633] ? __device_add_disk+0x536/0x11d0 [ 755.022011][T25633] ? bdi_register_va+0x600/0x600 [ 755.027196][T25633] ? vsnprintf+0x1bfd/0x1cd0 [ 755.031808][T25633] ? __kasan_check_read+0x11/0x20 [ 755.036855][T25633] ? blk_alloc_devt+0xd4/0x320 [ 755.041626][T25633] __device_add_disk+0x5cb/0x11d0 [ 755.046684][T25633] ? device_add_disk+0x40/0x40 [ 755.051464][T25633] ? loop_add+0x400/0x760 [ 755.055805][T25633] ? vsprintf+0x40/0x40 [ 755.059986][T25633] device_add_disk+0x2a/0x40 [ 755.064589][T25633] loop_add+0x58f/0x760 [ 755.068754][T25633] loop_control_ioctl+0x564/0x740 [ 755.073797][T25633] ? loop_remove+0xb0/0xb0 [ 755.078233][T25633] ? __fget_files+0x310/0x370 [ 755.082927][T25633] ? security_file_ioctl+0xb1/0xd0 [ 755.088055][T25633] ? loop_remove+0xb0/0xb0 [ 755.092504][T25633] __se_sys_ioctl+0x115/0x190 [ 755.097190][T25633] __x64_sys_ioctl+0x7b/0x90 [ 755.101793][T25633] do_syscall_64+0x34/0x70 [ 755.106221][T25633] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 755.112148][T25633] RIP: 0033:0x7fb457f980f9 [ 755.116568][T25633] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 755.136182][T25633] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.144609][T25633] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 755.152589][T25633] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 755.160579][T25633] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 755.168604][T25633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 21:23:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xb000000}, @empty}}) 21:23:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xc000000}, @empty}}) 21:23:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xd000000}, @empty}}) [ 755.176730][T25633] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 755.193868][T25616] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 755.204269][T25633] debugfs: out of free dentries, can not create directory '7:0' 21:23:59 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 65) 21:23:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x0, 0x1000000}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xe000000}, @empty}}) 21:23:59 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$eJzs271vHEUbAPBn7+zkTZy8NiF8xAlgBAiLDzt2AqSgABQkCpCQoAilsZ3I5BKj2EgkssBQhBIi0SNKJP4CKmgQUCHRQo8iRchNAtWhvdu1z5c747PPvsD+ftImM7tzmnl2du5md7wBFNZI+k8ScSAifo2IwXp2fYGR+n+3Vpam/1xZmk6iWn3jj6RW7ubK0nReNP/cQJ5ZruePtqh34fKV81OVyuylLD++eOHd8YXLV56euzB1bvbc7MXJU6dOnph47tnJZ7oSZxrXzeEP5o8deeWta69Nn7n29o9fJ3n8TXF0ychGBx/rcmW9drAhnfT1sCF0pBwRaXf118b/YJRjrfMG4+WPe9o4YEdVq9Xq3vaHT1eB/7Aket0CoDfyH/r0/jffdmnqcUe48WL9BiiN+1a21Y/0RSkr0990f9tNIxFxZvmvL9ItduY5BADAOt+m85+nWs3/SnFvQ7n/Z2soQxFxV0Qcioi7I+JwRNwTUSt7X0Tc32H9zYskt89/Ste3FNgmpfO/57O1rfXzv3z2F0PlLHewFn9/cnauMns8Oyej0b83zU9sUMd3p3/5tN2xxvlfuqX153PBrB3X+5oe0M1MLU5tJ+ZGNz6KGO5rFX+yuhKQRMSRiBjeYh1zT3x1rN2xf45/A11YZ6p+GfF4vf+Xoyn+XLLx+uT4/6Iye3w8vypu99PPV19vV/+24u+CtP/3t7z+V+MfShrXaxc6r+Pqb5+0vafZ6vW/J3mzlt6T7Xt/anHx0kTEnuTVbP8La/sn1z6b5/Pyafyjj7Qe/4di7UwcjYj0In4gIh6MiIeytj8cEQOfbRz/Dy89+s7W499ZafwzHfV/54ny+e+/WVfpUCfxp/1/spYazfZs5vtvsw3c7vkDAACAf4NSRByIpDS2mi6Vxsbqf8N/OPaXKvMLi0+enX/v4kz9HYGh6C/lT7oGG56HTmS39Xl+sil/Intu/Hl5Xy0/Nj1fmel18FBwA23Gf+r3cq9bB+w472tBcRn/UFzGPxSX8Q/F1WL87+tFO4Dd1+r3/8MetAPYfeb/UFzGPxSX8Q/FZfxDIW3nvX6JIieidEc0Q2KHEr3+ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiOvwMAAP//CFfmtg==") [ 755.385322][T25652] FAULT_INJECTION: forcing a failure. [ 755.385322][T25652] name failslab, interval 1, probability 0, space 0, times 0 [ 755.398981][T25652] CPU: 0 PID: 25652 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 755.410710][T25652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 755.420776][T25652] Call Trace: [ 755.424087][T25652] dump_stack_lvl+0x1e2/0x24b [ 755.428772][T25652] ? bfq_pos_tree_add_move+0x43e/0x43e [ 755.434468][T25652] ? __se_sys_ioctl+0x115/0x190 [ 755.439337][T25652] dump_stack+0x15/0x17 [ 755.443508][T25652] should_fail+0x3c0/0x510 [ 755.447934][T25652] __should_failslab+0x9f/0xe0 [ 755.452722][T25652] should_failslab+0x9/0x20 [ 755.457236][T25652] kmem_cache_alloc+0x3f/0x300 [ 755.462010][T25652] ? __d_alloc+0x2d/0x6b0 [ 755.466352][T25652] ? __reset_page_owner+0x35/0x160 [ 755.471468][T25652] __d_alloc+0x2d/0x6b0 [ 755.475649][T25652] ? __reset_page_owner+0x160/0x160 [ 755.480855][T25652] ? avc_has_perm_noaudit+0x358/0x4c0 [ 755.486239][T25652] d_alloc_parallel+0xe6/0x1330 [ 755.491112][T25652] ? avc_has_perm_noaudit+0x2ed/0x4c0 [ 755.496495][T25652] ? avc_denied+0x1b0/0x1b0 [ 755.501010][T25652] ? __reset_page_owner+0x80/0x160 [ 755.506130][T25652] ? d_hash_and_lookup+0x200/0x200 [ 755.511254][T25652] ? selinux_inode_permission+0x439/0x670 [ 755.517087][T25652] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 755.522910][T25652] __lookup_slow+0x14e/0x400 [ 755.527514][T25652] ? __d_lookup+0x4da/0x530 [ 755.532023][T25652] ? lookup_one_len+0x6a0/0x6a0 [ 755.536880][T25652] lookup_one_len+0x43d/0x6a0 [ 755.541570][T25652] ? try_lookup_one_len+0x660/0x660 [ 755.546785][T25652] start_creating+0x166/0x320 [ 755.551479][T25652] __debugfs_create_file+0x75/0x4a0 [ 755.556697][T25652] ? up_write+0x19/0xd0 [ 755.560864][T25652] debugfs_create_file+0x4a/0x60 [ 755.565808][T25652] bdi_register_va+0x2ab/0x600 [ 755.570584][T25652] bdi_register+0xd1/0x120 [ 755.575012][T25652] ? __device_add_disk+0x536/0x11d0 [ 755.580214][T25652] ? bdi_register_va+0x600/0x600 [ 755.585163][T25652] ? vsnprintf+0x1bfd/0x1cd0 [ 755.589861][T25652] ? __kasan_check_read+0x11/0x20 [ 755.594895][T25652] ? blk_alloc_devt+0xd4/0x320 [ 755.599672][T25652] __device_add_disk+0x5cb/0x11d0 [ 755.604797][T25652] ? device_add_disk+0x40/0x40 [ 755.609571][T25652] ? loop_add+0x400/0x760 [ 755.613918][T25652] ? vsprintf+0x40/0x40 [ 755.618091][T25652] device_add_disk+0x2a/0x40 [ 755.622690][T25652] loop_add+0x58f/0x760 [ 755.626860][T25652] loop_control_ioctl+0x564/0x740 [ 755.631892][T25652] ? loop_remove+0xb0/0xb0 21:23:59 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1bcedbeec23ecff71d827e1f4dcdd150dabe999d9d44ed659a46a0769834c2c505d1716416132c841372b1d16fd0cfbb61788a1f6a4db434bc97bc0b4e0385a09ba35930ac0846b8bfa5cd931333b5fb872bca7b98b1864de04d3856c774650002f672108b5add5868919f06d3025a0f7ce2dca84ef26d23b11cae346b507cd2a0ae45213cebc9e772034128c050bb98fe2840035973424f9e27d1cc0b80a0ca4085636d670161fdd862e70300fbc13eb2ac0a3d617d43300b5033cfc72257b908819e420696"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1bcedbeec23ecff71d827e1f4dcdd150dabe999d9d44ed659a46a0769834c2c505d1716416132c841372b1d16fd0cfbb61788a1f6a4db434bc97bc0b4e0385a09ba35930ac0846b8bfa5cd931333b5fb872bca7b98b1864de04d3856c774650002f672108b5add5868919f06d3025a0f7ce2dca84ef26d23b11cae346b507cd2a0ae45213cebc9e772034128c050bb98fe2840035973424f9e27d1cc0b80a0ca4085636d670161fdd862e70300fbc13eb2ac0a3d617d43300b5033cfc72257b908819e420696"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100804b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = signalfd(r1, &(0x7f00000000c0)={[0x8000000000000000]}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x8, 0x2, 0x0) (async) r4 = socket(0x8, 0x2, 0x0) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010001fff8c0200"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r5, @ANYBLOB="08000a16", @ANYRES32=r5, @ANYBLOB="95e32da72a42b4e5612c4c27fec861940fb671787256e5d6e37cbaccb9b591ce6d444ca0e4ff996b178c80ec505d688daa47e813c098de72cc40c0e7971e41a3346a8607efa3247b7fbe01ec739d5bd19c0077daf662cdb306691cf6c06196c47523b99c42cb4bbae554c45e5c70c8a47eead2c086ca5c3691483a233f10fe710d"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000001280)={'syztnl0\x00', r5, 0x29, 0x9, 0x1f, 0x0, 0x50, @private0={0xfc, 0x0, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x20, 0xffffffff, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000001280)={'syztnl0\x00', r5, 0x29, 0x9, 0x1f, 0x0, 0x50, @private0={0xfc, 0x0, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x20, 0xffffffff, 0x7}}) socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newneigh={0x24, 0x1c, 0x1, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x43, 0x4}, [@NDA_IFINDEX={0x8, 0x8, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40815}, 0x400c0) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) 21:23:59 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:23:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x10000000}, @empty}}) 21:23:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x0, 0x2000000}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 755.636322][T25652] ? __fget_files+0x310/0x370 [ 755.641014][T25652] ? security_file_ioctl+0xb1/0xd0 [ 755.646134][T25652] ? loop_remove+0xb0/0xb0 [ 755.650566][T25652] __se_sys_ioctl+0x115/0x190 [ 755.655256][T25652] __x64_sys_ioctl+0x7b/0x90 [ 755.659859][T25652] do_syscall_64+0x34/0x70 [ 755.664291][T25652] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 755.670192][T25652] RIP: 0033:0x7fb457f980f9 [ 755.674643][T25652] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 755.694263][T25652] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.702701][T25652] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 755.710699][T25652] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 755.718695][T25652] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 755.726685][T25652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 755.734672][T25652] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:23:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x11000000}, @empty}}) 21:23:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x12000000}, @empty}}) 21:23:59 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 66) 21:23:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x100000000000000}, @empty}}) 21:23:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x0, 0x29000000}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:23:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x200000000000000}, @empty}}) 21:23:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x300000000000000}, @empty}}) [ 755.817168][T25654] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 755.830677][T25654] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 755.843376][T25654] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 755.858928][T25666] FAULT_INJECTION: forcing a failure. [ 755.858928][T25666] name failslab, interval 1, probability 0, space 0, times 0 [ 755.873439][T25666] CPU: 1 PID: 25666 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 755.885159][T25666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 755.895202][T25666] Call Trace: [ 755.898482][T25666] dump_stack_lvl+0x1e2/0x24b [ 755.903143][T25666] ? bfq_pos_tree_add_move+0x43e/0x43e [ 755.909974][T25666] ? __lookup_slow+0x2f7/0x400 [ 755.914743][T25666] ? lookup_one_len+0x6a0/0x6a0 [ 755.919596][T25666] dump_stack+0x15/0x17 [ 755.923741][T25666] should_fail+0x3c0/0x510 [ 755.928149][T25666] __should_failslab+0x9f/0xe0 [ 755.932904][T25666] should_failslab+0x9/0x20 [ 755.937426][T25666] kmem_cache_alloc+0x3f/0x300 [ 755.942187][T25666] ? new_inode_pseudo+0x7c/0x220 [ 755.947131][T25666] new_inode_pseudo+0x7c/0x220 [ 755.951886][T25666] new_inode+0x28/0x1c0 [ 755.956033][T25666] ? start_creating+0x206/0x320 [ 755.960870][T25666] __debugfs_create_file+0x143/0x4a0 [ 755.966144][T25666] ? up_write+0x19/0xd0 [ 755.970300][T25666] debugfs_create_file+0x4a/0x60 [ 755.975228][T25666] bdi_register_va+0x2ab/0x600 [ 755.979989][T25666] bdi_register+0xd1/0x120 [ 755.984434][T25666] ? __device_add_disk+0x536/0x11d0 [ 755.989643][T25666] ? bdi_register_va+0x600/0x600 [ 755.994582][T25666] ? vsnprintf+0x1bfd/0x1cd0 [ 755.999163][T25666] ? __kasan_check_read+0x11/0x20 [ 756.004192][T25666] ? blk_alloc_devt+0xd4/0x320 [ 756.008947][T25666] __device_add_disk+0x5cb/0x11d0 [ 756.013972][T25666] ? device_add_disk+0x40/0x40 [ 756.018721][T25666] ? loop_add+0x400/0x760 [ 756.023045][T25666] ? vsprintf+0x40/0x40 [ 756.027201][T25666] device_add_disk+0x2a/0x40 [ 756.031779][T25666] loop_add+0x58f/0x760 [ 756.035926][T25666] loop_control_ioctl+0x564/0x740 [ 756.040946][T25666] ? loop_remove+0xb0/0xb0 [ 756.045356][T25666] ? __fget_files+0x310/0x370 [ 756.050039][T25666] ? security_file_ioctl+0xb1/0xd0 [ 756.055145][T25666] ? loop_remove+0xb0/0xb0 [ 756.059552][T25666] __se_sys_ioctl+0x115/0x190 [ 756.064229][T25666] __x64_sys_ioctl+0x7b/0x90 [ 756.068820][T25666] do_syscall_64+0x34/0x70 [ 756.073232][T25666] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 756.079114][T25666] RIP: 0033:0x7fb457f980f9 [ 756.083520][T25666] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 756.103215][T25666] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.111627][T25666] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 756.119596][T25666] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 756.127569][T25666] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 756.135673][T25666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 756.143902][T25666] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 756.152467][T25666] debugfs: out of free dentries, can not create file 'stats' 21:24:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x400000000000000}, @empty}}) [ 756.165420][T25657] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 756.178219][T25657] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 756.190815][T25657] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 21:24:00 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3f2, 0x400, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0xc78c8f5583d7ce43}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:24:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:24:00 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 67) 21:24:00 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:24:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x500000000000000}, @empty}}) 21:24:00 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:24:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x600000000000000}, @empty}}) 21:24:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x0, 0x0, 0x2}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:24:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x700000000000000}, @empty}}) 21:24:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x800000000000000}, @empty}}) [ 756.672696][T25690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=25690 comm=syz-executor.1 [ 756.732672][T25695] FAULT_INJECTION: forcing a failure. [ 756.732672][T25695] name failslab, interval 1, probability 0, space 0, times 0 [ 756.750910][T25696] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 756.763662][T25705] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 21:24:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x900000000000000}, @empty}}) [ 756.766314][T25696] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 756.792312][T25695] CPU: 1 PID: 25695 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 756.804146][T25695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 756.814192][T25695] Call Trace: [ 756.817471][T25695] dump_stack_lvl+0x1e2/0x24b [ 756.822134][T25695] ? panic+0x7d7/0x7d7 [ 756.826203][T25695] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 756.832280][T25695] ? bfq_pos_tree_add_move+0x43e/0x43e [ 756.837812][T25695] dump_stack+0x15/0x17 [ 756.841968][T25695] should_fail+0x3c0/0x510 [ 756.846374][T25695] __should_failslab+0x9f/0xe0 [ 756.851144][T25695] should_failslab+0x9/0x20 [ 756.855643][T25695] kmem_cache_alloc+0x3f/0x300 [ 756.860399][T25695] ? security_inode_alloc+0x29/0x140 [ 756.865776][T25695] security_inode_alloc+0x29/0x140 [ 756.870877][T25695] inode_init_always+0x710/0x970 [ 756.875804][T25695] new_inode_pseudo+0x93/0x220 [ 756.880551][T25695] new_inode+0x28/0x1c0 [ 756.884691][T25695] ? start_creating+0x206/0x320 [ 756.889529][T25695] __debugfs_create_file+0x143/0x4a0 [ 756.894802][T25695] ? up_write+0x19/0xd0 [ 756.898944][T25695] debugfs_create_file+0x4a/0x60 [ 756.903871][T25695] bdi_register_va+0x2ab/0x600 [ 756.908623][T25695] bdi_register+0xd1/0x120 [ 756.913029][T25695] ? __device_add_disk+0x536/0x11d0 [ 756.918211][T25695] ? bdi_register_va+0x600/0x600 [ 756.923223][T25695] ? vsnprintf+0x1bfd/0x1cd0 [ 756.927799][T25695] ? __kasan_check_read+0x11/0x20 [ 756.932823][T25695] ? blk_alloc_devt+0xd4/0x320 [ 756.937571][T25695] __device_add_disk+0x5cb/0x11d0 [ 756.942583][T25695] ? device_add_disk+0x40/0x40 [ 756.947332][T25695] ? loop_add+0x400/0x760 [ 756.951645][T25695] ? vsprintf+0x40/0x40 [ 756.955807][T25695] device_add_disk+0x2a/0x40 [ 756.960392][T25695] loop_add+0x58f/0x760 [ 756.964559][T25695] loop_control_ioctl+0x564/0x740 [ 756.969660][T25695] ? loop_remove+0xb0/0xb0 [ 756.974074][T25695] ? __fget_files+0x310/0x370 [ 756.978751][T25695] ? security_file_ioctl+0xb1/0xd0 [ 756.983871][T25695] ? loop_remove+0xb0/0xb0 [ 756.988278][T25695] __se_sys_ioctl+0x115/0x190 [ 756.992957][T25695] __x64_sys_ioctl+0x7b/0x90 [ 756.997538][T25695] do_syscall_64+0x34/0x70 [ 757.001944][T25695] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 757.007827][T25695] RIP: 0033:0x7fb457f980f9 [ 757.012234][T25695] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 757.031827][T25695] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 757.040235][T25695] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 757.048197][T25695] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 757.056162][T25695] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 757.064223][T25695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 757.072208][T25695] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:24:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xa00000000000000}, @empty}}) [ 757.081243][T25696] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 757.084234][T25695] debugfs: out of free dentries, can not create file 'stats' [ 757.144214][T25694] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 757.156832][T25694] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 757.169926][T25694] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:24:01 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3f2, 0x400, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0xc78c8f5583d7ce43}, 0x0) (async) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3f2, 0x400, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0xc78c8f5583d7ce43}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 21:24:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xb00000000000000}, @empty}}) 21:24:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x0, 0x0, 0x29}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:24:01 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 68) 21:24:01 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:24:01 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:24:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x0, 0x0, 0x2900}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:24:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xc00000000000000}, @empty}}) 21:24:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xd00000000000000}, @empty}}) [ 757.539953][T25725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=25725 comm=syz-executor.1 [ 757.543424][T25726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=25726 comm=syz-executor.1 [ 757.559215][T25723] FAULT_INJECTION: forcing a failure. [ 757.559215][T25723] name failslab, interval 1, probability 0, space 0, times 0 21:24:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0xe00000000000000}, @empty}}) 21:24:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x1000000000000000}, @empty}}) 21:24:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x1100000000000000}, @empty}}) [ 757.578882][T25723] CPU: 0 PID: 25723 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 757.590598][T25723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 757.600658][T25723] Call Trace: [ 757.603969][T25723] dump_stack_lvl+0x1e2/0x24b [ 757.608656][T25723] ? panic+0x7d7/0x7d7 [ 757.612746][T25723] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 757.617139][T25726] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 757.618816][T25723] ? bfq_pos_tree_add_move+0x43e/0x43e [ 757.618830][T25723] dump_stack+0x15/0x17 [ 757.618852][T25723] should_fail+0x3c0/0x510 [ 757.642251][T25723] __should_failslab+0x9f/0xe0 [ 757.648513][T25723] should_failslab+0x9/0x20 [ 757.653032][T25723] kmem_cache_alloc+0x3f/0x300 [ 757.657819][T25723] ? security_inode_alloc+0x29/0x140 [ 757.663095][T25723] security_inode_alloc+0x29/0x140 [ 757.668208][T25723] inode_init_always+0x710/0x970 [ 757.673160][T25723] new_inode_pseudo+0x93/0x220 [ 757.677913][T25723] new_inode+0x28/0x1c0 [ 757.682058][T25723] ? start_creating+0x206/0x320 [ 757.687037][T25723] __debugfs_create_file+0x143/0x4a0 [ 757.692311][T25723] ? up_write+0x19/0xd0 [ 757.696457][T25723] debugfs_create_file+0x4a/0x60 [ 757.701395][T25723] bdi_register_va+0x2ab/0x600 [ 757.706154][T25723] bdi_register+0xd1/0x120 [ 757.710559][T25723] ? __device_add_disk+0x536/0x11d0 [ 757.715858][T25723] ? bdi_register_va+0x600/0x600 [ 757.720787][T25723] ? vsnprintf+0x1bfd/0x1cd0 [ 757.725364][T25723] ? __kasan_check_read+0x11/0x20 [ 757.730374][T25723] ? blk_alloc_devt+0xd4/0x320 [ 757.735213][T25723] __device_add_disk+0x5cb/0x11d0 [ 757.740228][T25723] ? device_add_disk+0x40/0x40 [ 757.744980][T25723] ? loop_add+0x400/0x760 [ 757.749299][T25723] ? vsprintf+0x40/0x40 [ 757.753448][T25723] device_add_disk+0x2a/0x40 [ 757.758026][T25723] loop_add+0x58f/0x760 [ 757.762172][T25723] loop_control_ioctl+0x564/0x740 [ 757.767183][T25723] ? loop_remove+0xb0/0xb0 [ 757.771586][T25723] ? __fget_files+0x310/0x370 [ 757.776249][T25723] ? security_file_ioctl+0xb1/0xd0 [ 757.781349][T25723] ? loop_remove+0xb0/0xb0 [ 757.785753][T25723] __se_sys_ioctl+0x115/0x190 [ 757.790418][T25723] __x64_sys_ioctl+0x7b/0x90 [ 757.794994][T25723] do_syscall_64+0x34/0x70 [ 757.799398][T25723] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 757.805283][T25723] RIP: 0033:0x7fb457f980f9 [ 757.809771][T25723] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 757.829389][T25723] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 757.837808][T25723] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 757.845771][T25723] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 757.853736][T25723] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 757.861700][T25723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 757.869676][T25723] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 757.878329][T25723] debugfs: out of free dentries, can not create file 'stats' [ 757.910273][T25722] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 757.922919][T25722] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 757.936246][T25718] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 757.948870][T25722] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 757.959008][T25718] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 757.972488][T25718] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:24:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x0, 0x0, 0x1000000}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:24:02 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3f2, 0x400, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0xc78c8f5583d7ce43}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) pipe(&(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3f2, 0x400, 0x70bd28, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0xc78c8f5583d7ce43}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) (async) 21:24:02 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 69) 21:24:02 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:24:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x1200000000000000}, @empty}}) 21:24:02 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:24:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x0, 0x0, 0x2000000}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:24:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback={0x0, 0x300}, @empty}}) 21:24:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) [ 758.436765][T25746] FAULT_INJECTION: forcing a failure. [ 758.436765][T25746] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 758.451461][T25746] CPU: 1 PID: 25746 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 758.463198][T25746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 758.473265][T25746] Call Trace: [ 758.476566][T25746] dump_stack_lvl+0x1e2/0x24b [ 758.481254][T25746] ? bfq_pos_tree_add_move+0x43e/0x43e [ 758.486721][T25746] dump_stack+0x15/0x17 [ 758.490890][T25746] should_fail+0x3c0/0x510 [ 758.495313][T25746] should_fail_alloc_page+0x50/0x60 [ 758.500512][T25746] __alloc_pages_nodemask+0x1c0/0x890 [ 758.505893][T25746] ? loop_add+0x58f/0x760 [ 758.510232][T25746] ? loop_control_ioctl+0x564/0x740 [ 758.515442][T25746] ? __se_sys_ioctl+0x115/0x190 [ 758.520309][T25746] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 758.525869][T25746] ? __kasan_check_write+0x14/0x20 [ 758.530992][T25746] ? lockref_get+0x1b3/0x2a0 [ 758.535601][T25746] ? __kasan_check_write+0x14/0x20 [ 758.540724][T25746] __get_free_pages+0xe/0x30 [ 758.545327][T25746] selinux_genfs_get_sid+0x56/0x250 [ 758.550537][T25746] inode_doinit_with_dentry+0x858/0x1030 [ 758.556183][T25746] ? sb_finish_set_opts+0x7f0/0x7f0 [ 758.561394][T25746] ? current_time+0x1c4/0x310 [ 758.566084][T25746] selinux_d_instantiate+0x27/0x40 [ 758.571261][T25746] security_d_instantiate+0xa5/0x100 [ 758.576553][T25746] d_instantiate+0x55/0x90 [ 758.580979][T25746] __debugfs_create_file+0x2d7/0x4a0 [ 758.586275][T25746] ? up_write+0x19/0xd0 [ 758.590441][T25746] debugfs_create_file+0x4a/0x60 [ 758.595390][T25746] bdi_register_va+0x2ab/0x600 [ 758.600171][T25746] bdi_register+0xd1/0x120 [ 758.604598][T25746] ? __device_add_disk+0x536/0x11d0 [ 758.609802][T25746] ? bdi_register_va+0x600/0x600 [ 758.614751][T25746] ? vsnprintf+0x1bfd/0x1cd0 [ 758.619442][T25746] ? __kasan_check_read+0x11/0x20 [ 758.624480][T25746] ? blk_alloc_devt+0xd4/0x320 [ 758.629255][T25746] __device_add_disk+0x5cb/0x11d0 [ 758.634293][T25746] ? device_add_disk+0x40/0x40 [ 758.639078][T25746] ? loop_add+0x400/0x760 [ 758.643420][T25746] ? vsprintf+0x40/0x40 [ 758.647584][T25746] device_add_disk+0x2a/0x40 [ 758.652185][T25746] loop_add+0x58f/0x760 [ 758.656357][T25746] loop_control_ioctl+0x564/0x740 [ 758.661393][T25746] ? loop_remove+0xb0/0xb0 [ 758.665820][T25746] ? __fget_files+0x310/0x370 [ 758.670507][T25746] ? security_file_ioctl+0xb1/0xd0 [ 758.675627][T25746] ? loop_remove+0xb0/0xb0 [ 758.680062][T25746] __se_sys_ioctl+0x115/0x190 [ 758.684747][T25746] __x64_sys_ioctl+0x7b/0x90 [ 758.689347][T25746] do_syscall_64+0x34/0x70 [ 758.693778][T25746] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 758.699681][T25746] RIP: 0033:0x7fb457f980f9 [ 758.704108][T25746] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 758.723727][T25746] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:24:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x2}}) 21:24:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x3}}) [ 758.732160][T25746] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 758.740148][T25746] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 758.748133][T25746] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 758.756203][T25746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 758.764192][T25746] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:24:02 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 70) 21:24:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x0, 0x0, 0x0, 0x29000000}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) [ 758.806393][T25764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=25764 comm=syz-executor.1 [ 758.840125][T25748] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 758.852838][T25748] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 758.865328][T25748] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 758.884093][T25768] FAULT_INJECTION: forcing a failure. [ 758.884093][T25768] name failslab, interval 1, probability 0, space 0, times 0 21:24:02 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0xfb6, 0x0) 21:24:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x4}}) 21:24:02 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x5}}) [ 758.896933][T25768] CPU: 1 PID: 25768 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 758.896998][T25770] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 758.908655][T25768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 758.908661][T25768] Call Trace: [ 758.908682][T25768] dump_stack_lvl+0x1e2/0x24b [ 758.908698][T25768] ? panic+0x7d7/0x7d7 [ 758.908711][T25768] ? bfq_pos_tree_add_move+0x43e/0x43e [ 758.908725][T25768] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 758.908738][T25768] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 758.908758][T25768] dump_stack+0x15/0x17 [ 758.959974][T25768] should_fail+0x3c0/0x510 [ 758.964381][T25768] ? kobj_map+0x72/0x6f0 [ 758.968613][T25768] __should_failslab+0x9f/0xe0 [ 758.973366][T25768] should_failslab+0x9/0x20 [ 758.977857][T25768] __kmalloc+0x60/0x360 [ 758.982000][T25768] ? __device_add_disk+0x536/0x11d0 [ 758.987182][T25768] kobj_map+0x72/0x6f0 [ 758.991241][T25768] ? exact_match+0x20/0x20 [ 758.995662][T25768] ? bdev_check_media_change+0x4c0/0x4c0 [ 759.001294][T25768] __device_add_disk+0x663/0x11d0 [ 759.006314][T25768] ? device_add_disk+0x40/0x40 [ 759.011077][T25768] ? loop_add+0x400/0x760 [ 759.015394][T25768] ? vsprintf+0x40/0x40 [ 759.019538][T25768] device_add_disk+0x2a/0x40 [ 759.024114][T25768] loop_add+0x58f/0x760 [ 759.028271][T25768] loop_control_ioctl+0x564/0x740 [ 759.033280][T25768] ? loop_remove+0xb0/0xb0 [ 759.037679][T25768] ? __fget_files+0x310/0x370 [ 759.042366][T25768] ? security_file_ioctl+0xb1/0xd0 [ 759.047473][T25768] ? loop_remove+0xb0/0xb0 [ 759.051875][T25768] __se_sys_ioctl+0x115/0x190 [ 759.056539][T25768] __x64_sys_ioctl+0x7b/0x90 [ 759.061148][T25768] do_syscall_64+0x34/0x70 [ 759.065566][T25768] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 759.071451][T25768] RIP: 0033:0x7fb457f980f9 [ 759.075857][T25768] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 759.095474][T25768] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.103881][T25768] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 759.111859][T25768] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 759.119908][T25768] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.127984][T25768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 759.135944][T25768] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 21:24:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x6}}) [ 759.147906][T25751] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 759.160859][T25751] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 759.173412][T25751] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:24:03 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:24:03 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 71) 21:24:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', r1, 0x2f, 0x1, 0x69, 0x0, 0x42, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x20, 0x7800, 0x2, 0xa5b5}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:24:03 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:24:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x7}}) 21:24:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x8}}) 21:24:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', r1, 0x2f, 0x1, 0x69, 0x0, 0x42, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x20, 0x7800, 0x2, 0xa5b5}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:24:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x9}}) [ 759.259284][T25798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 759.279321][T25789] FAULT_INJECTION: forcing a failure. [ 759.279321][T25789] name failslab, interval 1, probability 0, space 0, times 0 [ 759.293201][T25789] CPU: 0 PID: 25789 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 759.304923][T25789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 759.315079][T25789] Call Trace: [ 759.318378][T25789] dump_stack_lvl+0x1e2/0x24b [ 759.323137][T25789] ? panic+0x7d7/0x7d7 [ 759.327202][T25789] ? bfq_pos_tree_add_move+0x43e/0x43e [ 759.332760][T25789] ? _raw_spin_lock_bh+0xa3/0x1b0 [ 759.337875][T25789] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 759.343063][T25789] dump_stack+0x15/0x17 [ 759.347217][T25789] should_fail+0x3c0/0x510 [ 759.351645][T25789] ? kobj_map+0x72/0x6f0 [ 759.355886][T25789] __should_failslab+0x9f/0xe0 [ 759.360638][T25789] should_failslab+0x9/0x20 [ 759.365468][T25789] __kmalloc+0x60/0x360 [ 759.369620][T25789] ? __device_add_disk+0x536/0x11d0 [ 759.374806][T25789] kobj_map+0x72/0x6f0 [ 759.378864][T25789] ? exact_match+0x20/0x20 [ 759.383268][T25789] ? bdev_check_media_change+0x4c0/0x4c0 [ 759.388904][T25789] __device_add_disk+0x663/0x11d0 [ 759.393919][T25789] ? device_add_disk+0x40/0x40 [ 759.398671][T25789] ? loop_add+0x400/0x760 [ 759.402989][T25789] ? vsprintf+0x40/0x40 [ 759.407135][T25789] device_add_disk+0x2a/0x40 [ 759.411711][T25789] loop_add+0x58f/0x760 [ 759.415868][T25789] loop_control_ioctl+0x564/0x740 [ 759.420889][T25789] ? loop_remove+0xb0/0xb0 [ 759.425297][T25789] ? __fget_files+0x310/0x370 [ 759.429962][T25789] ? security_file_ioctl+0xb1/0xd0 [ 759.435078][T25789] ? loop_remove+0xb0/0xb0 [ 759.439499][T25789] __se_sys_ioctl+0x115/0x190 [ 759.444166][T25789] __x64_sys_ioctl+0x7b/0x90 [ 759.448863][T25789] do_syscall_64+0x34/0x70 [ 759.453269][T25789] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 759.459150][T25789] RIP: 0033:0x7fb457f980f9 [ 759.463555][T25789] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 759.483168][T25789] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.491588][T25789] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 759.499568][T25789] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 759.507533][T25789] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 759.515503][T25789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 759.523463][T25789] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 759.547844][T25795] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 759.560713][T25795] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 759.563630][T25802] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 759.573365][T25795] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 759.596470][T25802] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 759.609045][T25802] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 21:24:03 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) splice(r0, 0x0, r2, 0x0, 0xfb6, 0x0) 21:24:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0xa}}) 21:24:03 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) (fail_nth: 72) 21:24:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', r1, 0x2f, 0x1, 0x69, 0x0, 0x42, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x20, 0x7800, 0x2, 0xa5b5}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 21:24:03 executing program 4: writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:24:03 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f0000000240)='system_u:object_r:load_policy_exec_t:s0\x00', 0x28, 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) creat(&(0x7f0000000200)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x1e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x2, 0x422, &(0x7f00000004c0)="$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") 21:24:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0xb}}) 21:24:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @private1, @empty, 0x0, 0x1}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0x6, 0x0) open_tree(r3, &(0x7f0000000540)='./file0\x00', 0x10800) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast1}, r2}, 0x14) 21:24:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0xc}}) 21:24:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0xd}}) 21:24:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0xe}}) [ 760.121511][T25812] FAULT_INJECTION: forcing a failure. [ 760.121511][T25812] name failslab, interval 1, probability 0, space 0, times 0 [ 760.141818][T25831] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 760.143346][T25812] CPU: 1 PID: 25812 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 760.151293][T25819] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 760.162853][T25812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 760.162859][T25812] Call Trace: [ 760.162881][T25812] dump_stack_lvl+0x1e2/0x24b [ 760.162895][T25812] ? bfq_pos_tree_add_move+0x43e/0x43e [ 760.162908][T25812] dump_stack+0x15/0x17 [ 760.162921][T25812] should_fail+0x3c0/0x510 [ 760.162933][T25812] ? __kernfs_new_node+0x99/0x6e0 [ 760.162955][T25812] __should_failslab+0x9f/0xe0 [ 760.183258][T25819] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 760.185320][T25812] should_failslab+0x9/0x20 [ 760.185342][T25812] __kmalloc_track_caller+0x5f/0x350 [ 760.188837][T25819] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 760.193331][T25812] ? __kernel_text_address+0x9a/0x110 [ 760.193348][T25812] ? unwind_get_return_address+0x4c/0x90 [ 760.193361][T25812] kstrdup_const+0x55/0x90 [ 760.193382][T25812] __kernfs_new_node+0x99/0x6e0 [ 760.268263][T25812] ? stack_trace_save+0x12d/0x1f0 [ 760.273281][T25812] ? kernfs_new_node+0x170/0x170 [ 760.278225][T25812] ? stack_trace_snprint+0x100/0x100 [ 760.283517][T25812] ? dput+0x2ce/0x320 [ 760.287509][T25812] ? device_add+0xbe/0xbd0 [ 760.293887][T25812] kernfs_create_dir_ns+0x9b/0x230 [ 760.299663][T25812] sysfs_create_dir_ns+0x181/0x390 [ 760.304803][T25812] ? sysfs_warn_dup+0xa0/0xa0 [ 760.309914][T25812] kobject_add_internal+0x766/0xda0 [ 760.317621][T25812] kobject_add+0x14c/0x210 [ 760.322048][T25812] ? _raw_spin_lock+0xa3/0x1b0 [ 760.326843][T25812] ? kobject_init+0x1e0/0x1e0 [ 760.331515][T25812] ? mutex_unlock+0x29/0xf0 [ 760.336117][T25812] ? get_device_parent+0x2c5/0x430 [ 760.341229][T25812] device_add+0x3ca/0xbd0 [ 760.345561][T25812] __device_add_disk+0x77d/0x11d0 [ 760.350584][T25812] ? device_add_disk+0x40/0x40 [ 760.355526][T25812] ? vsprintf+0x40/0x40 [ 760.359705][T25812] device_add_disk+0x2a/0x40 [ 760.364296][T25812] loop_add+0x58f/0x760 [ 760.368451][T25812] loop_control_ioctl+0x564/0x740 [ 760.373470][T25812] ? loop_remove+0xb0/0xb0 [ 760.377881][T25812] ? __fget_files+0x310/0x370 [ 760.382550][T25812] ? security_file_ioctl+0xb1/0xd0 [ 760.387666][T25812] ? loop_remove+0xb0/0xb0 [ 760.392088][T25812] __se_sys_ioctl+0x115/0x190 [ 760.396775][T25812] __x64_sys_ioctl+0x7b/0x90 [ 760.401362][T25812] do_syscall_64+0x34/0x70 [ 760.405778][T25812] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 760.411661][T25812] RIP: 0033:0x7fb457f980f9 [ 760.416186][T25812] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 760.435799][T25812] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.444207][T25812] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 760.452175][T25812] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 760.460227][T25812] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 21:24:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @private1, @empty, 0x0, 0x1}}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000140), 0x6, 0x0) open_tree(r3, &(0x7f0000000540)='./file0\x00', 0x10800) (async, rerun: 64) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @multicast1}, r2}, 0x14) (rerun: 64) [ 760.468190][T25812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 760.476154][T25812] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 760.487379][T25812] kobject_add_internal failed for loop0 (error: -12 parent: block) [ 760.495782][T25812] kobject_add_internal failed for queue (error: -2 parent: loop0) [ 760.504034][T25812] ------------[ cut here ]------------ [ 760.509601][T25812] WARNING: CPU: 1 PID: 25812 at fs/sysfs/file.c:328 sysfs_create_files+0x215/0x4a0 [ 760.519219][T25812] Modules linked in: [ 760.523382][T25812] CPU: 1 PID: 25812 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 760.535453][T25812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 760.545847][T25812] RIP: 0010:sysfs_create_files+0x215/0x4a0 [ 760.551718][T25812] Code: 24 04 48 b9 00 00 00 00 00 fc ff df 48 8b 54 24 08 4c 8b 74 24 20 eb 2b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 e8 5b a2 9a ff <0f> 0b c7 44 24 04 ea ff ff ff 48 b9 00 00 00 00 00 fc ff df 48 8b [ 760.571574][T25812] RSP: 0018:ffffc900091ffae0 EFLAGS: 00010246 [ 760.577783][T25812] RAX: ffffffff81d27fd1 RBX: ffff888112243098 RCX: 0000000000040000 [ 760.585979][T25812] RDX: ffffc9000153d000 RSI: 000000000003ffff RDI: 0000000000040000 [ 760.594120][T25812] RBP: ffffc900091ffbb0 R08: ffffffff826c6018 R09: ffffed1021448470 [ 760.602211][T25812] R10: ffffed1021448470 R11: 1ffff1102144846f R12: 0000000000000000 [ 760.610259][T25812] R13: ffffffff85433120 R14: ffff888112243068 R15: ffffffff8653acc0 [ 760.618593][T25812] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 760.627637][T25812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.634286][T25812] CR2: 00007f7416096998 CR3: 0000000117194000 CR4: 00000000003506a0 [ 760.642333][T25812] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 760.650353][T25812] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 760.658409][T25812] Call Trace: [ 760.661750][T25812] ? sysfs_create_file_ns+0x2a0/0x2a0 [ 760.667199][T25812] ? __kasan_check_write+0x14/0x20 [ 760.672481][T25812] ? kobject_get+0xd2/0x120 [ 760.677020][T25812] __device_add_disk+0x9cb/0x11d0 [ 760.682113][T25812] ? device_add_disk+0x40/0x40 [ 760.687120][T25812] ? vsprintf+0x40/0x40 [ 760.691422][T25812] device_add_disk+0x2a/0x40 [ 760.696085][T25812] loop_add+0x58f/0x760 [ 760.700301][T25812] loop_control_ioctl+0x564/0x740 [ 760.705396][T25812] ? loop_remove+0xb0/0xb0 [ 760.709873][T25812] ? __fget_files+0x310/0x370 [ 760.714628][T25812] ? security_file_ioctl+0xb1/0xd0 [ 760.719788][T25812] ? loop_remove+0xb0/0xb0 [ 760.724270][T25812] __se_sys_ioctl+0x115/0x190 [ 760.728990][T25812] __x64_sys_ioctl+0x7b/0x90 [ 760.733655][T25812] do_syscall_64+0x34/0x70 [ 760.738123][T25812] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 760.744097][T25812] RIP: 0033:0x7fb457f980f9 [ 760.748542][T25812] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 760.768207][T25812] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 760.776774][T25812] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 760.784951][T25812] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 760.792961][T25812] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 760.800953][T25812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 760.808975][T25812] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 760.817097][T25812] ---[ end trace e057be27904f752a ]--- [ 760.822564][T25812] ------------[ cut here ]------------ [ 760.828027][T25812] kernfs: can not remove 'events', no directory [ 760.834402][T25812] WARNING: CPU: 1 PID: 25812 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0xc0/0x110 [ 760.844212][T25812] Modules linked in: [ 760.848104][T25812] CPU: 1 PID: 25812 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 760.859878][T25812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 760.869974][T25812] RIP: 0010:kernfs_remove_by_name_ns+0xc0/0x110 [ 760.876231][T25812] Code: 48 89 df e8 72 ee ff ff 48 89 df e8 8a b1 ff ff 31 db eb 29 e8 c1 00 9b ff 48 c7 c7 40 2f 2d 85 4c 89 fe 31 c0 e8 70 17 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 a2 00 9b ff bb fe ff ff ff 48 c7 c7 [ 760.895877][T25812] RSP: 0018:ffffc900091ffab8 EFLAGS: 00010246 [ 760.901942][T25812] RAX: 9e6a7e936652e300 RBX: 0000000000000000 RCX: 0000000000040000 [ 760.909938][T25812] RDX: ffffc9000153d000 RSI: 000000000003ffff RDI: 0000000000040000 21:24:04 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="11"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d400000019001905000000000000000002200000ff02ff000000000008000100ac14140018009400111a82000400010100004b31901b77481e35fd008a0008"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) (async) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0xfb6, 0x0) (async) splice(r0, 0x0, r2, 0x0, 0xfb6, 0x0) 21:24:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x10}}) [ 760.917937][T25812] RBP: ffffc900091ffad0 R08: ffffffff81540db8 R09: fffff5200123fe7d [ 760.925936][T25812] R10: fffff5200123fe7d R11: 1ffff9200123fe7c R12: ffffffff8653acc0 [ 760.933968][T25812] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff85433100 [ 760.941951][T25812] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 760.950908][T25812] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.957539][T25812] CR2: 00007f7416096998 CR3: 0000000117194000 CR4: 00000000003506a0 [ 760.965595][T25812] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 760.973761][T25812] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 760.981745][T25812] Call Trace: [ 760.985073][T25812] sysfs_create_files+0x40a/0x4a0 [ 760.990125][T25812] ? sysfs_create_file_ns+0x2a0/0x2a0 [ 760.995539][T25812] ? __kasan_check_write+0x14/0x20 [ 761.000658][T25812] ? kobject_get+0xd2/0x120 [ 761.005212][T25812] __device_add_disk+0x9cb/0x11d0 [ 761.010246][T25812] ? device_add_disk+0x40/0x40 [ 761.015141][T25812] ? vsprintf+0x40/0x40 [ 761.019310][T25812] device_add_disk+0x2a/0x40 [ 761.023948][T25812] loop_add+0x58f/0x760 [ 761.028120][T25812] loop_control_ioctl+0x564/0x740 [ 761.033179][T25812] ? loop_remove+0xb0/0xb0 [ 761.037605][T25812] ? __fget_files+0x310/0x370 [ 761.042330][T25812] ? security_file_ioctl+0xb1/0xd0 [ 761.047450][T25812] ? loop_remove+0xb0/0xb0 [ 761.051874][T25812] __se_sys_ioctl+0x115/0x190 [ 761.056573][T25812] __x64_sys_ioctl+0x7b/0x90 [ 761.061169][T25812] do_syscall_64+0x34/0x70 [ 761.065603][T25812] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 761.071505][T25812] RIP: 0033:0x7fb457f980f9 [ 761.075941][T25812] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 761.095568][T25812] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 761.104025][T25812] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 761.112010][T25812] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 21:24:05 executing program 5: r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 21:24:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty, 0x11}}) [ 761.120048][T25812] RBP: 00007fb456d0b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 761.128066][T25812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 761.136074][T25812] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 761.144077][T25812] ---[ end trace e057be27904f752b ]--- [ 761.149557][T25812] loop0: failed to create sysfs files for events [ 761.171482][T25816] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2179: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 761.184020][T25816] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 761.202885][T25816] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 761.231545][T25849] ------------[ cut here ]------------ [ 761.240081][T25849] kernfs: can not remove 'events', no directory [ 761.246830][T25849] WARNING: CPU: 1 PID: 25849 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0xc0/0x110 [ 761.259312][T25849] Modules linked in: [ 761.263526][T25849] CPU: 1 PID: 25849 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 761.275922][T25852] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 761.276275][T25849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 761.296398][T25849] RIP: 0010:kernfs_remove_by_name_ns+0xc0/0x110 [ 761.302990][T25849] Code: 48 89 df e8 72 ee ff ff 48 89 df e8 8a b1 ff ff 31 db eb 29 e8 c1 00 9b ff 48 c7 c7 40 2f 2d 85 4c 89 fe 31 c0 e8 70 17 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 a2 00 9b ff bb fe ff ff ff 48 c7 c7 [ 761.322972][T25849] RSP: 0018:ffffc9000938fbf8 EFLAGS: 00010246 [ 761.329179][T25849] RAX: 1aa9f0c56e45b900 RBX: 0000000000000000 RCX: ffff888107f8bb40 [ 761.337500][T25849] RDX: 0000000000000003 RSI: 0000000000003400 RDI: 000000000001a010 [ 761.345749][T25849] RBP: ffffc9000938fc10 R08: ffffffff81540db8 R09: 0000000000000d01 [ 761.354016][T25849] R10: 0000000080000000 R11: 1ffff1103ee2a5e7 R12: 0000000000000000 [ 761.362297][T25849] R13: ffffffff8653acc0 R14: 0000000000000000 R15: ffffffff85433100 [ 761.370510][T25849] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 761.379787][T25849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 761.386668][T25849] CR2: 00007fb456cea718 CR3: 0000000109e80000 CR4: 00000000003506a0 [ 761.394935][T25849] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 761.403176][T25849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 761.411394][T25849] Call Trace: [ 761.415047][T25849] sysfs_remove_files+0xab/0x110 [ 761.420115][T25849] del_gendisk+0x278/0xe20 [ 761.424841][T25849] ? device_add_disk_no_queue_reg+0x30/0x30 [ 761.430855][T25849] ? __radix_tree_delete+0x2ba/0x380 [ 761.436485][T25849] ? radix_tree_delete_item+0x261/0x360 [ 761.442301][T25849] loop_remove+0x46/0xb0 [ 761.446667][T25849] loop_control_ioctl+0x67f/0x740 [ 761.451815][T25849] ? loop_remove+0xb0/0xb0 [ 761.456626][T25849] ? __fget_files+0x310/0x370 [ 761.461445][T25849] ? security_file_ioctl+0xb1/0xd0 [ 761.466857][T25849] ? loop_remove+0xb0/0xb0 [ 761.471375][T25849] __se_sys_ioctl+0x115/0x190 [ 761.476414][T25849] __x64_sys_ioctl+0x7b/0x90 [ 761.481284][T25849] do_syscall_64+0x34/0x70 [ 761.486034][T25849] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 761.492028][T25849] RIP: 0033:0x7fb457f980f9 [ 761.496828][T25849] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 761.517054][T25849] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 761.525788][T25849] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 761.534146][T25849] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 761.542382][T25849] RBP: 00007fb457ff3ae9 R08: 0000000000000000 R09: 0000000000000000 [ 761.550578][T25849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.558870][T25849] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 761.567112][T25849] ---[ end trace e057be27904f752c ]--- [ 761.573065][T25849] ------------[ cut here ]------------ [ 761.578746][T25849] kernfs: can not remove 'events_async', no directory [ 761.585921][T25849] WARNING: CPU: 1 PID: 25849 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0xc0/0x110 [ 761.595991][T25849] Modules linked in: [ 761.600013][T25849] CPU: 1 PID: 25849 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 761.612052][T25849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 761.622447][T25849] RIP: 0010:kernfs_remove_by_name_ns+0xc0/0x110 [ 761.628811][T25849] Code: 48 89 df e8 72 ee ff ff 48 89 df e8 8a b1 ff ff 31 db eb 29 e8 c1 00 9b ff 48 c7 c7 40 2f 2d 85 4c 89 fe 31 c0 e8 70 17 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 a2 00 9b ff bb fe ff ff ff 48 c7 c7 [ 761.648814][T25849] RSP: 0018:ffffc9000938fbf8 EFLAGS: 00010246 [ 761.655204][T25849] RAX: 1aa9f0c56e45b900 RBX: 0000000000000000 RCX: ffff888107f8bb40 [ 761.663548][T25849] RDX: 0000000000000003 RSI: 0000000080000000 RDI: 0000000000000000 [ 761.671638][T25849] RBP: ffffc9000938fc10 R08: ffffffff81540db8 R09: 000000000000ffff [ 761.679939][T25849] R10: ffffed103ee2a5e8 R11: 1ffff1103ee2a5e7 R12: 0000000000000000 [ 761.688174][T25849] R13: ffffffff8653acc0 R14: 0000000000000000 R15: ffffffff854331e0 [ 761.696412][T25849] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 761.705650][T25849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 761.712516][T25849] CR2: 00007fb456cea718 CR3: 0000000109e80000 CR4: 00000000003506a0 [ 761.720614][T25849] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 761.728950][T25849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 761.737190][T25849] Call Trace: [ 761.740598][T25849] sysfs_remove_files+0xab/0x110 [ 761.745867][T25849] del_gendisk+0x278/0xe20 [ 761.750404][T25849] ? device_add_disk_no_queue_reg+0x30/0x30 [ 761.756594][T25849] ? __radix_tree_delete+0x2ba/0x380 [ 761.762031][T25849] ? radix_tree_delete_item+0x261/0x360 [ 761.767908][T25849] loop_remove+0x46/0xb0 [ 761.772398][T25849] loop_control_ioctl+0x67f/0x740 [ 761.777534][T25849] ? loop_remove+0xb0/0xb0 [ 761.782044][T25849] ? __fget_files+0x310/0x370 [ 761.787095][T25849] ? security_file_ioctl+0xb1/0xd0 [ 761.792464][T25849] ? loop_remove+0xb0/0xb0 [ 761.796989][T25849] __se_sys_ioctl+0x115/0x190 [ 761.801773][T25849] __x64_sys_ioctl+0x7b/0x90 [ 761.806760][T25849] do_syscall_64+0x34/0x70 [ 761.811281][T25849] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 761.817521][T25849] RIP: 0033:0x7fb457f980f9 [ 761.822036][T25849] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 761.842020][T25849] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 761.851010][T25849] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 761.859282][T25849] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 761.867541][T25849] RBP: 00007fb457ff3ae9 R08: 0000000000000000 R09: 0000000000000000 [ 761.875799][T25849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.884037][T25849] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 761.892313][T25849] ---[ end trace e057be27904f752d ]--- [ 761.897884][T25849] ------------[ cut here ]------------ [ 761.903646][T25849] kernfs: can not remove 'events_poll_msecs', no directory [ 761.911041][T25849] WARNING: CPU: 1 PID: 25849 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0xc0/0x110 [ 761.921169][T25849] Modules linked in: [ 761.925319][T25849] CPU: 1 PID: 25849 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 761.937306][T25849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 761.947641][T25849] RIP: 0010:kernfs_remove_by_name_ns+0xc0/0x110 [ 761.954147][T25849] Code: 48 89 df e8 72 ee ff ff 48 89 df e8 8a b1 ff ff 31 db eb 29 e8 c1 00 9b ff 48 c7 c7 40 2f 2d 85 4c 89 fe 31 c0 e8 70 17 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 a2 00 9b ff bb fe ff ff ff 48 c7 c7 [ 761.974107][T25849] RSP: 0018:ffffc9000938fbf8 EFLAGS: 00010246 [ 761.980309][T25849] RAX: 1aa9f0c56e45b900 RBX: 0000000000000000 RCX: ffff888107f8bb40 [ 761.988641][T25849] RDX: 0000000000000003 RSI: 0000000080000000 RDI: 0000000000000000 [ 761.996913][T25849] RBP: ffffc9000938fc10 R08: ffffffff81540db8 R09: 000000000000ffff [ 762.005152][T25849] R10: ffffed103ee24e93 R11: 1ffff1103ee24e92 R12: 0000000000000000 [ 762.013385][T25849] R13: ffffffff8653acc0 R14: 0000000000000000 R15: ffffffff85433240 [ 762.021476][T25849] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 762.030736][T25849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.037599][T25849] CR2: 00007fb456cea718 CR3: 0000000109e80000 CR4: 00000000003506a0 [ 762.045967][T25849] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 762.072050][T25849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 762.082633][T25849] Call Trace: [ 762.086008][T25849] sysfs_remove_files+0xab/0x110 [ 762.091014][T25849] del_gendisk+0x278/0xe20 [ 762.095820][T25849] ? device_add_disk_no_queue_reg+0x30/0x30 [ 762.101784][T25849] ? __radix_tree_delete+0x2ba/0x380 [ 762.107444][T25849] ? radix_tree_delete_item+0x261/0x360 [ 762.113449][T25849] loop_remove+0x46/0xb0 [ 762.117791][T25849] loop_control_ioctl+0x67f/0x740 [ 762.123128][T25849] ? loop_remove+0xb0/0xb0 [ 762.127624][T25849] ? __fget_files+0x310/0x370 [ 762.132606][T25849] ? security_file_ioctl+0xb1/0xd0 [ 762.137806][T25849] ? loop_remove+0xb0/0xb0 [ 762.142526][T25849] __se_sys_ioctl+0x115/0x190 [ 762.147289][T25849] __x64_sys_ioctl+0x7b/0x90 [ 762.151941][T25849] do_syscall_64+0x34/0x70 [ 762.156759][T25849] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 762.162918][T25849] RIP: 0033:0x7fb457f980f9 [ 762.167418][T25849] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 762.187395][T25849] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.196125][T25849] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 762.204473][T25849] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 762.212827][T25849] RBP: 00007fb457ff3ae9 R08: 0000000000000000 R09: 0000000000000000 [ 762.220880][T25849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.229239][T25849] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 762.237756][T25849] ---[ end trace e057be27904f752e ]--- [ 762.243572][T25849] ------------[ cut here ]------------ [ 762.249130][T25849] kernfs: can not remove 'bdi', no directory [ 762.255571][T25849] WARNING: CPU: 1 PID: 25849 at fs/kernfs/dir.c:1515 kernfs_remove_by_name_ns+0xc0/0x110 [ 762.265640][T25849] Modules linked in: [ 762.269628][T25849] CPU: 1 PID: 25849 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 762.281730][T25849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 762.292140][T25849] RIP: 0010:kernfs_remove_by_name_ns+0xc0/0x110 [ 762.298460][T25849] Code: 48 89 df e8 72 ee ff ff 48 89 df e8 8a b1 ff ff 31 db eb 29 e8 c1 00 9b ff 48 c7 c7 40 2f 2d 85 4c 89 fe 31 c0 e8 70 17 6d ff <0f> 0b bb fe ff ff ff eb 16 e8 a2 00 9b ff bb fe ff ff ff 48 c7 c7 [ 762.318448][T25849] RSP: 0018:ffffc9000938fc18 EFLAGS: 00010246 [ 762.324753][T25849] RAX: 1aa9f0c56e45b900 RBX: 0000000000000000 RCX: ffff888107f8bb40 [ 762.332975][T25849] RDX: 0000000000000003 RSI: 0000000080000000 RDI: 0000000000000000 [ 762.341031][T25849] RBP: ffffc9000938fc30 R08: ffffffff81540db8 R09: 000000000000ffff [ 762.349340][T25849] R10: ffffed103ee2a5e8 R11: 1ffff1103ee2a5e7 R12: 0000000000000240 [ 762.357551][T25849] R13: ffff888112243030 R14: 0000000000000000 R15: ffffffff85432ae0 [ 762.365773][T25849] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 762.374950][T25849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.381607][T25849] CR2: 0000001b3303a000 CR3: 0000000109e80000 CR4: 00000000003506a0 [ 762.389889][T25849] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 762.398098][T25849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 762.406329][T25849] Call Trace: [ 762.409713][T25849] sysfs_remove_link+0x50/0x60 [ 762.414758][T25849] del_gendisk+0x7cd/0xe20 [ 762.419256][T25849] ? device_add_disk_no_queue_reg+0x30/0x30 [ 762.425450][T25849] ? __radix_tree_delete+0x2ba/0x380 [ 762.430815][T25849] ? radix_tree_delete_item+0x261/0x360 [ 762.436670][T25849] loop_remove+0x46/0xb0 [ 762.440993][T25849] loop_control_ioctl+0x67f/0x740 [ 762.446312][T25849] ? loop_remove+0xb0/0xb0 [ 762.450833][T25849] ? __fget_files+0x310/0x370 [ 762.455777][T25849] ? security_file_ioctl+0xb1/0xd0 [ 762.460956][T25849] ? loop_remove+0xb0/0xb0 [ 762.465682][T25849] __se_sys_ioctl+0x115/0x190 [ 762.470433][T25849] __x64_sys_ioctl+0x7b/0x90 [ 762.475335][T25849] do_syscall_64+0x34/0x70 [ 762.479832][T25849] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 762.485983][T25849] RIP: 0033:0x7fb457f980f9 [ 762.490474][T25849] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 762.510428][T25849] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.519090][T25849] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 762.527320][T25849] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 762.535786][T25849] RBP: 00007fb457ff3ae9 R08: 0000000000000000 R09: 0000000000000000 [ 762.544012][T25849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.552322][T25849] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 762.560458][T25849] ---[ end trace e057be27904f752f ]--- [ 762.566582][T25849] general protection fault, probably for non-canonical address 0xdffffc000000001a: 0000 [#1] PREEMPT SMP KASAN [ 762.578302][T25849] KASAN: null-ptr-deref in range [0x00000000000000d0-0x00000000000000d7] [ 762.586721][T25849] CPU: 1 PID: 25849 Comm: syz-executor.5 Tainted: G W 5.10.161-syzkaller-00019-g416c4356f372 #0 [ 762.598429][T25849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 762.608502][T25849] RIP: 0010:device_del+0xdf/0xf00 [ 762.613533][T25849] Code: 20 42 80 3c 28 00 74 08 48 89 df e8 6b aa df fe 4c 89 7c 24 48 41 bf d0 00 00 00 48 89 5c 24 18 4c 03 3b 4d 89 fc 49 c1 ec 03 <43> 8a 04 2c 84 c0 0f 85 0d 0d 00 00 41 0f b6 1f 89 de 83 e6 01 31 [ 762.633170][T25849] RSP: 0018:ffffc9000938fb60 EFLAGS: 00010202 [ 762.639248][T25849] RAX: 1ffff1102244861a RBX: ffff8881122430d0 RCX: ffff888107f8bb40 [ 762.647245][T25849] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000938fae0 [ 762.655228][T25849] RBP: ffffc9000938fc50 R08: dffffc0000000000 R09: fffff52001271f5d [ 762.663206][T25849] R10: fffff52001271f5d R11: 1ffff92001271f5c R12: 000000000000001a [ 762.671188][T25849] R13: dffffc0000000000 R14: ffff888112243108 R15: 00000000000000d0 [ 762.679169][T25849] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 762.688105][T25849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.695045][T25849] CR2: 0000001b3303a000 CR3: 0000000109e80000 CR4: 00000000003506a0 [ 762.703024][T25849] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 762.711001][T25849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 762.719408][T25849] Call Trace: [ 762.722710][T25849] ? _raw_spin_lock_irqsave+0x210/0x210 [ 762.728265][T25849] ? kernfs_name_hash+0x1f9/0x240 [ 762.733301][T25849] ? kill_device+0xd0/0xd0 [ 762.737731][T25849] del_gendisk+0xbf2/0xe20 [ 762.742159][T25849] ? device_add_disk_no_queue_reg+0x30/0x30 [ 762.748059][T25849] ? __radix_tree_delete+0x2ba/0x380 [ 762.753349][T25849] ? radix_tree_delete_item+0x261/0x360 [ 762.758910][T25849] loop_remove+0x46/0xb0 [ 762.763160][T25849] loop_control_ioctl+0x67f/0x740 [ 762.768188][T25849] ? loop_remove+0xb0/0xb0 [ 762.772613][T25849] ? __fget_files+0x310/0x370 [ 762.777392][T25849] ? security_file_ioctl+0xb1/0xd0 [ 762.782513][T25849] ? loop_remove+0xb0/0xb0 [ 762.786937][T25849] __se_sys_ioctl+0x115/0x190 [ 762.791620][T25849] __x64_sys_ioctl+0x7b/0x90 [ 762.796219][T25849] do_syscall_64+0x34/0x70 [ 762.800643][T25849] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 762.806536][T25849] RIP: 0033:0x7fb457f980f9 [ 762.810959][T25849] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 762.830576][T25849] RSP: 002b:00007fb456d0b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.839015][T25849] RAX: ffffffffffffffda RBX: 00007fb4580b7f80 RCX: 00007fb457f980f9 [ 762.847084][T25849] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 762.855061][T25849] RBP: 00007fb457ff3ae9 R08: 0000000000000000 R09: 0000000000000000 [ 762.863034][T25849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.871014][T25849] R13: 00007ffeb359550f R14: 00007fb456d0b300 R15: 0000000000022000 [ 762.878991][T25849] Modules linked in: [ 762.885834][T25849] ---[ end trace e057be27904f7530 ]--- [ 762.891394][T25849] RIP: 0010:device_del+0xdf/0xf00 [ 762.896769][T25849] Code: 20 42 80 3c 28 00 74 08 48 89 df e8 6b aa df fe 4c 89 7c 24 48 41 bf d0 00 00 00 48 89 5c 24 18 4c 03 3b 4d 89 fc 49 c1 ec 03 <43> 8a 04 2c 84 c0 0f 85 0d 0d 00 00 41 0f b6 1f 89 de 83 e6 01 31 [ 762.916722][T25849] RSP: 0018:ffffc9000938fb60 EFLAGS: 00010202 [ 762.923057][T25849] RAX: 1ffff1102244861a RBX: ffff8881122430d0 RCX: ffff888107f8bb40 [ 762.931192][T25849] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc9000938fae0 [ 762.939518][T25849] RBP: ffffc9000938fc50 R08: dffffc0000000000 R09: fffff52001271f5d [ 762.947911][T25849] R10: fffff52001271f5d R11: 1ffff92001271f5c R12: 000000000000001a [ 762.956380][T25849] R13: dffffc0000000000 R14: ffff888112243108 R15: 00000000000000d0 [ 762.964623][T25849] FS: 00007fb456d0b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 762.973806][T25849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 762.980463][T25849] CR2: 0000001b3303a000 CR3: 0000000109e80000 CR4: 00000000003506a0 [ 762.988733][T25849] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 762.996952][T25849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 763.005160][T25849] Kernel panic - not syncing: Fatal exception [ 763.011433][T25849] Kernel Offset: disabled [ 763.015752][T25849] Rebooting in 86400 seconds..