1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x6003, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) [ 471.839815][T24850] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 471.897585][T24884] FAULT_INJECTION: forcing a failure. [ 471.897585][T24884] name failslab, interval 1, probability 0, space 0, times 0 [ 471.913367][T24883] EXT4-fs error (device loop4): ext4_fill_super:4591: inode #2: comm syz-executor.4: iget: root inode unallocated [ 471.922864][T24884] CPU: 1 PID: 24884 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 471.933287][T24883] EXT4-fs (loop4): get root inode failed [ 471.935685][T24884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.935688][T24884] Call Trace: [ 471.935708][T24884] dump_stack+0x1dd/0x24e [ 471.943149][T24883] EXT4-fs (loop4): mount failed [ 471.951411][T24884] ? devkmsg_release+0x11c/0x11c [ 471.951422][T24884] ? show_regs_print_info+0x12/0x12 [ 471.951431][T24884] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 471.951443][T24884] should_fail+0x6fb/0x860 [ 471.951452][T24884] ? setup_fault_attr+0x3d0/0x3d0 [ 471.951461][T24884] ? __alloc_skb+0x88/0x4d0 [ 471.951473][T24884] should_failslab+0x5/0x20 [ 471.998990][T24884] kmem_cache_alloc+0x36/0x270 [ 472.004041][T24884] __alloc_skb+0x88/0x4d0 [ 472.008512][T24884] ? skb_put+0x114/0x1e0 [ 472.013014][T24884] __ip6_append_data+0x285e/0x3a90 [ 472.018112][T24884] ? __ip6_append_data+0x2231/0x3a90 [ 472.023382][T24884] ? ip6_setup_cork+0x1470/0x1470 [ 472.028392][T24884] ? ip6_append_data+0x2c0/0x2c0 [ 472.033423][T24884] ? lock_sock_nested+0x27a/0x310 [ 472.038518][T24884] ? xfrm_lookup_route+0x5f/0x170 [ 472.043656][T24884] ip6_append_data+0x1ad/0x2c0 [ 472.048449][T24884] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 472.053736][T24884] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 472.059375][T24884] rawv6_sendmsg+0x1b00/0x2cf0 [ 472.064126][T24884] ? compat_rawv6_ioctl+0x10/0x10 [ 472.069329][T24884] ? selinux_socket_sendmsg+0x11f/0x340 [ 472.074861][T24884] ? memset+0x1f/0x40 [ 472.078829][T24884] ? inet_send_prepare+0x1b7/0x470 [ 472.083941][T24884] ? inet_send_prepare+0x470/0x470 [ 472.089038][T24884] __sys_sendto+0x4f6/0x6c0 [ 472.093526][T24884] ? __ia32_sys_getpeername+0x80/0x80 [ 472.098994][T24884] ? vfs_write+0x427/0x4f0 [ 472.103415][T24884] ? debug_smp_processor_id+0x20/0x20 [ 472.108773][T24884] ? __ia32_sys_read+0x80/0x80 [ 472.113620][T24884] __x64_sys_sendto+0xda/0xf0 [ 472.118301][T24884] do_syscall_64+0xcb/0x150 [ 472.122798][T24884] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 472.128857][T24884] RIP: 0033:0x45e149 [ 472.132741][T24884] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 472.152646][T24884] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 472.161038][T24884] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 472.169127][T24884] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 472.177082][T24884] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 472.185037][T24884] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000022 [ 472.193006][T24884] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 472.234859][T24883] EXT4-fs error (device loop4): ext4_fill_super:4591: inode #2: comm syz-executor.4: iget: root inode unallocated [ 472.247544][T24883] EXT4-fs (loop4): get root inode failed [ 472.253233][T24883] EXT4-fs (loop4): mount failed 12:43:54 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4000, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:54 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(r5, 0x4040ae79, &(0x7f0000000000)) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140), 0x4) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0x10, 0x20, 0xffffff1e, 0x34, @mcast1, @empty, 0x7, 0x1, 0x1, 0x9}}) 12:43:54 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xeaf0, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:54 executing program 3 (fault-call:1 fault-nth:35): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:54 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58b1ad, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:54 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) r0 = socket$inet(0x10, 0x80003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000200030a1f0000080c1008000800120002000000140000001a00ffffba16a0aa1c09000000000000", 0x38}], 0x1}, 0x0) chroot(&(0x7f00000003c0)='./file0\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x30, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) 12:43:54 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58b300, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:54 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58b595, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 472.345409][T24904] FAULT_INJECTION: forcing a failure. [ 472.345409][T24904] name failslab, interval 1, probability 0, space 0, times 0 [ 472.359146][T24904] CPU: 0 PID: 24904 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 472.369308][T24904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.379520][T24904] Call Trace: [ 472.382964][T24904] dump_stack+0x1dd/0x24e [ 472.387304][T24904] ? devkmsg_release+0x11c/0x11c [ 472.392253][T24904] ? show_regs_print_info+0x12/0x12 [ 472.397453][T24904] should_fail+0x6fb/0x860 [ 472.401872][T24904] ? setup_fault_attr+0x3d0/0x3d0 [ 472.406886][T24904] ? __ip6_append_data+0x285e/0x3a90 [ 472.412353][T24904] should_failslab+0x5/0x20 [ 472.416851][T24904] __kmalloc_track_caller+0x5d/0x2c0 [ 472.422116][T24904] ? kmem_cache_alloc+0x1e0/0x270 [ 472.427125][T24904] ? __ip6_append_data+0x285e/0x3a90 [ 472.432393][T24904] __alloc_skb+0xd1/0x4d0 [ 472.436708][T24904] ? skb_put+0x114/0x1e0 [ 472.440935][T24904] __ip6_append_data+0x285e/0x3a90 [ 472.446036][T24904] ? __ip6_append_data+0x2231/0x3a90 [ 472.451451][T24904] ? ip6_setup_cork+0x1470/0x1470 [ 472.456462][T24904] ? ip6_append_data+0x2c0/0x2c0 [ 472.461383][T24904] ? lock_sock_nested+0x27a/0x310 [ 472.466393][T24904] ? xfrm_lookup_route+0x5f/0x170 [ 472.471402][T24904] ip6_append_data+0x1ad/0x2c0 [ 472.476150][T24904] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 472.481415][T24904] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 472.486687][T24904] rawv6_sendmsg+0x1b00/0x2cf0 [ 472.491450][T24904] ? compat_rawv6_ioctl+0x10/0x10 [ 472.496463][T24904] ? selinux_socket_sendmsg+0x11f/0x340 [ 472.502000][T24904] ? memset+0x1f/0x40 [ 472.505970][T24904] ? inet_send_prepare+0x1b7/0x470 [ 472.511156][T24904] ? inet_send_prepare+0x470/0x470 [ 472.516295][T24904] __sys_sendto+0x4f6/0x6c0 [ 472.521110][T24904] ? __ia32_sys_getpeername+0x80/0x80 [ 472.526473][T24904] ? vfs_write+0x427/0x4f0 [ 472.530994][T24904] ? debug_smp_processor_id+0x20/0x20 [ 472.536358][T24904] ? __ia32_sys_read+0x80/0x80 [ 472.541108][T24904] __x64_sys_sendto+0xda/0xf0 [ 472.545771][T24904] do_syscall_64+0xcb/0x150 [ 472.550262][T24904] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 472.556139][T24904] RIP: 0033:0x45e149 [ 472.560020][T24904] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 472.579608][T24904] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 472.588004][T24904] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 12:43:54 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4086, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:54 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xf088, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:54 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58b745, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:54 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x41cd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:54 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58b848, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 472.596024][T24904] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 472.603981][T24904] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 472.611939][T24904] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000023 [ 472.620379][T24904] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 472.688643][T24905] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:43:54 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0xac0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x10, &(0x7f0000000080)=0x400, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:54 executing program 3 (fault-call:1 fault-nth:36): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:54 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58b898, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 472.886345][T24938] FAULT_INJECTION: forcing a failure. [ 472.886345][T24938] name failslab, interval 1, probability 0, space 0, times 0 [ 472.899339][T24938] CPU: 1 PID: 24938 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 472.909504][T24938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.919810][T24938] Call Trace: [ 472.923158][T24938] dump_stack+0x1dd/0x24e [ 472.927475][T24938] ? devkmsg_release+0x11c/0x11c [ 472.932408][T24938] ? show_regs_print_info+0x12/0x12 [ 472.937693][T24938] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 472.943914][T24938] should_fail+0x6fb/0x860 [ 472.948339][T24938] ? setup_fault_attr+0x3d0/0x3d0 [ 472.953363][T24938] ? __alloc_skb+0x88/0x4d0 [ 472.957863][T24938] should_failslab+0x5/0x20 [ 472.962364][T24938] kmem_cache_alloc+0x36/0x270 [ 472.967126][T24938] __alloc_skb+0x88/0x4d0 [ 472.971450][T24938] ? skb_put+0x114/0x1e0 [ 472.975691][T24938] __ip6_append_data+0x285e/0x3a90 [ 472.980804][T24938] ? __ip6_append_data+0x2231/0x3a90 [ 472.986093][T24938] ? ip6_setup_cork+0x1470/0x1470 [ 472.991110][T24938] ? ip6_append_data+0x2c0/0x2c0 [ 472.996030][T24938] ? lock_sock_nested+0x27a/0x310 [ 473.001367][T24938] ? xfrm_lookup_route+0x5f/0x170 [ 473.006376][T24938] ip6_append_data+0x1ad/0x2c0 [ 473.011256][T24938] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 473.016526][T24938] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 473.021810][T24938] rawv6_sendmsg+0x1b00/0x2cf0 [ 473.026697][T24938] ? compat_rawv6_ioctl+0x10/0x10 [ 473.031718][T24938] ? selinux_socket_sendmsg+0x11f/0x340 [ 473.037348][T24938] ? memset+0x1f/0x40 [ 473.041333][T24938] ? inet_send_prepare+0x1b7/0x470 [ 473.046446][T24938] ? inet_send_prepare+0x470/0x470 [ 473.051551][T24938] __sys_sendto+0x4f6/0x6c0 [ 473.056041][T24938] ? __ia32_sys_getpeername+0x80/0x80 [ 473.061696][T24938] ? vfs_write+0x427/0x4f0 [ 473.066098][T24938] ? debug_smp_processor_id+0x20/0x20 [ 473.071602][T24938] ? __ia32_sys_read+0x80/0x80 [ 473.076467][T24938] __x64_sys_sendto+0xda/0xf0 [ 473.081217][T24938] do_syscall_64+0xcb/0x150 [ 473.085707][T24938] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 473.091581][T24938] RIP: 0033:0x45e149 [ 473.095506][T24938] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 473.115348][T24938] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 473.123768][T24938] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 12:43:55 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4320, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:55 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xf620, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58b8fb, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:55 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e22, 0x7f, @private2, 0xef28}, {0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x6b}, 0x4}, 0x3, [0x80000001, 0x81, 0x7fffffff, 0x1, 0x2160ac88, 0x6, 0x8, 0x2]}, 0x5c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x400, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x204040) fcntl$setpipe(r2, 0x407, 0x1ff) write(r0, &(0x7f0000000340), 0x41395527) accept4$unix(r0, 0x0, 0x0, 0x80000) ioctl$RTC_UIE_OFF(r0, 0x7004) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(r3, 0x0, 0x0, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000440)={0x7ff, 0x3, [0x40, 0x0, 0x80, 0x2, 0x3], 0x7e0}) 12:43:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58bcdd, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:55 executing program 3 (fault-call:1 fault-nth:37): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 473.131730][T24938] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 473.139691][T24938] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 473.147646][T24938] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000024 [ 473.155600][T24938] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:43:55 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfa65, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58bd79, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:55 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4504, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 473.228481][T24954] FAULT_INJECTION: forcing a failure. [ 473.228481][T24954] name failslab, interval 1, probability 0, space 0, times 0 12:43:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58be30, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58c02c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 473.272613][T24954] CPU: 0 PID: 24954 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 473.282795][T24954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.293007][T24954] Call Trace: [ 473.296403][T24954] dump_stack+0x1dd/0x24e [ 473.300732][T24954] ? devkmsg_release+0x11c/0x11c [ 473.305675][T24954] ? show_regs_print_info+0x12/0x12 [ 473.310877][T24954] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 473.316954][T24954] should_fail+0x6fb/0x860 12:43:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58c0df, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58c275, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 473.321463][T24954] ? setup_fault_attr+0x3d0/0x3d0 [ 473.326577][T24954] ? __alloc_skb+0x88/0x4d0 [ 473.331084][T24954] should_failslab+0x5/0x20 [ 473.335603][T24954] kmem_cache_alloc+0x36/0x270 [ 473.340380][T24954] __alloc_skb+0x88/0x4d0 [ 473.344886][T24954] ? skb_put+0x114/0x1e0 [ 473.349129][T24954] __ip6_append_data+0x285e/0x3a90 [ 473.354388][T24954] ? __ip6_append_data+0x2231/0x3a90 [ 473.359678][T24954] ? ip6_setup_cork+0x1470/0x1470 [ 473.364838][T24954] ? ip6_append_data+0x2c0/0x2c0 12:43:55 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfbb8, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 473.369775][T24954] ? lock_sock_nested+0x27a/0x310 [ 473.374799][T24954] ? xfrm_lookup_route+0x5f/0x170 [ 473.379830][T24954] ip6_append_data+0x1ad/0x2c0 [ 473.384595][T24954] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 473.389885][T24954] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 473.395169][T24954] rawv6_sendmsg+0x1b00/0x2cf0 [ 473.399938][T24954] ? compat_rawv6_ioctl+0x10/0x10 [ 473.404970][T24954] ? selinux_socket_sendmsg+0x11f/0x340 [ 473.410526][T24954] ? memset+0x1f/0x40 [ 473.414512][T24954] ? inet_send_prepare+0x1b7/0x470 12:43:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58c3c8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 473.419632][T24954] ? inet_send_prepare+0x470/0x470 [ 473.424744][T24954] __sys_sendto+0x4f6/0x6c0 [ 473.429251][T24954] ? __ia32_sys_getpeername+0x80/0x80 [ 473.434637][T24954] ? vfs_write+0x427/0x4f0 [ 473.439058][T24954] ? debug_smp_processor_id+0x20/0x20 [ 473.444581][T24954] ? __ia32_sys_read+0x80/0x80 [ 473.449493][T24954] __x64_sys_sendto+0xda/0xf0 [ 473.454173][T24954] do_syscall_64+0xcb/0x150 [ 473.458773][T24954] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 473.464664][T24954] RIP: 0033:0x45e149 [ 473.468575][T24954] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 473.488404][T24954] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 473.496816][T24954] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 473.504788][T24954] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 473.512760][T24954] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 473.520820][T24954] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000025 [ 473.528803][T24954] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 473.540976][T24961] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:43:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58c55d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc010000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x240, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x140, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x2d0}, 0x1, 0x0, 0x0, 0x10}, 0x40801) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) 12:43:56 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x45b7, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 3 (fault-call:1 fault-nth:38): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000040)={0x6, 0x7f, [{0x2, 0x0, 0x5}, {0x2, 0x0, 0xffffffffffffff00}, {0x9, 0x0, 0x9}, {0x7ff, 0x0, 0x80}, {0x40}, {0x9, 0x0, 0x8}]}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) r4 = syz_genetlink_get_family_id$mptcp(0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000004d48c4ea6f4d20d0fc5d4831d60a3a4089ba6e532d11f25f4b09d58b0bee127135fd536fea4d0da4c5b488c054fa3222874ea9fbfef29a4fb7d441150548617c9ee31d9e662799e1595d2b8eea986df4cdc329b2865002d379d1624c7a9838c66465c611dac9ee9c186b70f4253e7fadbdda471b37ebca48ef4e49f810c6f9290fd671052b2d5a5981c79cc512f10ca5ac6b6ce67a18f98008cd2e180f7cd1b745349b654", @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf25010000003800018008000700", @ANYRES32=0x0, @ANYBLOB="060005004e200000080006000400000008000300ac1414bb14000400fc00000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="3e000000ac5d4ae81f4f0e312bedc2f8b945479d017e5700a5df14e17f2ceb81318d89650fb19030c7959f4e31eac3280e1f37b9e2ccf8724f040861f4cd274627b72ab05cefa9cc482ef415fd19600412b3e7813373be0a4174abd73a5aa12a9bc5145fefda308b593d1e1467ac81823f198586f91c0bb1f7e7bd660000fc695100"/144, @ANYRES16=r4, @ANYBLOB="000228bd7000fedbdf250200000008000300040000000800030006000000080003000200000008000200010000001c0001800500020005000000080003000a010101060001000200000008000300080000000800030002000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x4004) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:56 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0x200100fd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58c805, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 474.064792][T24993] FAULT_INJECTION: forcing a failure. [ 474.064792][T24993] name failslab, interval 1, probability 0, space 0, times 0 [ 474.078235][T24993] CPU: 1 PID: 24993 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 474.088399][T24993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.098459][T24993] Call Trace: [ 474.101933][T24993] dump_stack+0x1dd/0x24e [ 474.106275][T24993] ? devkmsg_release+0x11c/0x11c [ 474.111224][T24993] ? show_regs_print_info+0x12/0x12 [ 474.116427][T24993] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 474.122627][T24993] should_fail+0x6fb/0x860 [ 474.127056][T24993] ? setup_fault_attr+0x3d0/0x3d0 [ 474.132247][T24993] ? __alloc_skb+0x88/0x4d0 [ 474.136761][T24993] should_failslab+0x5/0x20 [ 474.141269][T24993] kmem_cache_alloc+0x36/0x270 [ 474.146040][T24993] __alloc_skb+0x88/0x4d0 [ 474.150371][T24993] ? skb_put+0x114/0x1e0 [ 474.154619][T24993] __ip6_append_data+0x285e/0x3a90 [ 474.159900][T24993] ? __ip6_append_data+0x2231/0x3a90 [ 474.165196][T24993] ? ip6_setup_cork+0x1470/0x1470 [ 474.170223][T24993] ? ip6_append_data+0x2c0/0x2c0 [ 474.175333][T24993] ? lock_sock_nested+0x27a/0x310 [ 474.180358][T24993] ? xfrm_lookup_route+0x5f/0x170 [ 474.185384][T24993] ip6_append_data+0x1ad/0x2c0 [ 474.190149][T24993] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 474.195677][T24993] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 474.200964][T24993] rawv6_sendmsg+0x1b00/0x2cf0 [ 474.205824][T24993] ? compat_rawv6_ioctl+0x10/0x10 12:43:56 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4765, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58c80d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x486a, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58c810, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58c8c3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58c960, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 474.210853][T24993] ? selinux_socket_sendmsg+0x11f/0x340 [ 474.216542][T24993] ? memset+0x1f/0x40 [ 474.220609][T24993] ? inet_send_prepare+0x1b7/0x470 [ 474.225726][T24993] ? inet_send_prepare+0x470/0x470 [ 474.230833][T24993] __sys_sendto+0x4f6/0x6c0 [ 474.235565][T24993] ? __ia32_sys_getpeername+0x80/0x80 [ 474.241006][T24993] ? vfs_write+0x427/0x4f0 [ 474.245406][T24993] ? debug_smp_processor_id+0x20/0x20 [ 474.250761][T24993] ? __ia32_sys_read+0x80/0x80 [ 474.255510][T24993] __x64_sys_sendto+0xda/0xf0 [ 474.260178][T24993] do_syscall_64+0xcb/0x150 [ 474.264669][T24993] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.270543][T24993] RIP: 0033:0x45e149 [ 474.274417][T24993] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 474.294585][T24993] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 474.303120][T24993] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 474.311081][T24993] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 474.319163][T24993] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 474.327246][T24993] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000026 [ 474.339826][T24993] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 474.380846][T25017] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 474.391505][T25017] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 474.406620][T25017] __quota_error: 6 callbacks suppressed [ 474.406627][T25017] Quota error (device loop4): write_blk: dquota write failed [ 474.419842][T25017] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 474.431689][T25017] Quota error (device loop4): write_blk: dquota write failed [ 474.439191][T25017] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 474.451887][T25021] Quota error (device loop4): write_blk: dquota write failed [ 474.459653][T25021] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 474.470182][T25021] Quota error (device loop4): write_blk: dquota write failed 12:43:56 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x48b8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58cd41, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) tkill(r4, 0x1e) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x5, 0x15, 0x6, 0x12, 0x4, 0x5, 0x6, 0x12b, 0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, r5, {0x7, 0x20, 0x400, 0xa6b25, 0x7f, 0xe05, 0x3, 0x6}}, 0x50) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:56 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0x7ffff000, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x1c1603, 0x180) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 12:43:56 executing program 3 (fault-call:1 fault-nth:39): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580002, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58cda5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4cfd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58cdf4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 474.477837][T25021] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 474.510500][T25032] FAULT_INJECTION: forcing a failure. [ 474.510500][T25032] name failslab, interval 1, probability 0, space 0, times 0 12:43:56 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4d9b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58cef8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4e50, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58d0a7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 474.523338][T25032] CPU: 1 PID: 25032 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 474.533623][T25032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.543688][T25032] Call Trace: [ 474.546993][T25032] dump_stack+0x1dd/0x24e [ 474.551352][T25032] ? devkmsg_release+0x11c/0x11c [ 474.556300][T25032] ? show_regs_print_info+0x12/0x12 [ 474.561510][T25032] should_fail+0x6fb/0x860 [ 474.565936][T25032] ? setup_fault_attr+0x3d0/0x3d0 [ 474.570968][T25032] ? __ip6_append_data+0x285e/0x3a90 [ 474.576257][T25032] should_failslab+0x5/0x20 [ 474.580767][T25032] __kmalloc_track_caller+0x5d/0x2c0 [ 474.586065][T25032] ? kmem_cache_alloc+0x1e0/0x270 [ 474.591091][T25032] ? __ip6_append_data+0x285e/0x3a90 [ 474.596499][T25032] __alloc_skb+0xd1/0x4d0 [ 474.601007][T25032] ? skb_put+0x114/0x1e0 [ 474.605368][T25032] __ip6_append_data+0x285e/0x3a90 [ 474.610599][T25032] ? __ip6_append_data+0x2231/0x3a90 [ 474.615872][T25032] ? ip6_setup_cork+0x1470/0x1470 [ 474.620883][T25032] ? ip6_append_data+0x2c0/0x2c0 [ 474.625804][T25032] ? lock_sock_nested+0x27a/0x310 [ 474.630813][T25032] ? xfrm_lookup_route+0x5f/0x170 [ 474.635819][T25032] ip6_append_data+0x1ad/0x2c0 [ 474.640568][T25032] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 474.645947][T25032] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 474.651597][T25032] rawv6_sendmsg+0x1b00/0x2cf0 [ 474.656498][T25032] ? compat_rawv6_ioctl+0x10/0x10 [ 474.661512][T25032] ? selinux_socket_sendmsg+0x11f/0x340 [ 474.667044][T25032] ? memset+0x1f/0x40 [ 474.671009][T25032] ? inet_send_prepare+0x1b7/0x470 [ 474.676166][T25032] ? inet_send_prepare+0x470/0x470 [ 474.681262][T25032] __sys_sendto+0x4f6/0x6c0 [ 474.685750][T25032] ? __ia32_sys_getpeername+0x80/0x80 [ 474.691102][T25032] ? vfs_write+0x427/0x4f0 [ 474.695522][T25032] ? debug_smp_processor_id+0x20/0x20 [ 474.700947][T25032] ? __ia32_sys_read+0x80/0x80 [ 474.705880][T25032] __x64_sys_sendto+0xda/0xf0 [ 474.710543][T25032] do_syscall_64+0xcb/0x150 [ 474.715137][T25032] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.721187][T25032] RIP: 0033:0x45e149 [ 474.725064][T25032] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 474.744650][T25032] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 474.753094][T25032] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 474.761047][T25032] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 474.769003][T25032] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c 12:43:56 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x41}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x442}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000805}, 0x24008015) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/248, 0xf8) 12:43:56 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x504e, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 474.776959][T25032] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000027 [ 474.784921][T25032] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:43:56 executing program 3 (fault-call:1 fault-nth:40): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58d33d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5295, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 474.844325][T25053] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 474.854991][T25053] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 474.870163][T25053] Quota error (device loop4): write_blk: dquota write failed [ 474.878022][T25053] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:43:56 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58d490, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x53e8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:56 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r1 = creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000100)='fuse\x00', &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0, 0x20000, &(0x7f0000000600)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read'}}], [{@euid_lt={'euid<'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x0, 0x62, 0x63], 0x2d, [0x0, 0x31, 0xd, 0x65], 0x2d, [0x35, 0x0, 0x62, 0x64], 0x2d, [0x30, 0x34, 0x0, 0x62], 0x2d, [0x31, 0x66, 0x63, 0x34, 0x30, 0x64, 0x30, 0x66]}}}, {@smackfsroot={'smackfsroot', 0x3d, 'overlay\x00'}}, {@measure='measure'}]}}) read$FUSE(r1, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchownat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, r3, 0x0) keyctl$chown(0x4, r0, 0x0, r3) r4 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@builtin='builtin_trusted\x00') r5 = creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) r6 = syz_mount_image$fuse(&(0x7f0000000100)='fuse\x00', &(0x7f0000000380)='./bus\x00', 0x0, 0x0, 0x0, 0x20000, &(0x7f0000000600)={{'fd', 0x3d, r5}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read'}}], [{@euid_lt={'euid<'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x0, 0x62, 0x63, 0x0, 0x37, 0x0, 0x36], 0x2d, [0x0, 0x31, 0x34, 0x65], 0x2d, [0x35, 0x0, 0x62, 0x64], 0x2d, [0x30, 0x34, 0x0, 0x62], 0x2d, [0x31, 0x66, 0x63, 0x34, 0x30, 0x64, 0x30, 0x66]}}}, {@smackfsroot={'smackfsroot', 0x3d, 'overlay\x00'}}, {@measure='measure'}]}}) read$FUSE(r5, &(0x7f0000000780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchownat(r6, &(0x7f00000003c0)='./file0\x00', 0x0, r7, 0x0) keyctl$chown(0x4, r4, 0x0, r7) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x2}, [{0x2, 0x6, 0xee00}], {0x4, 0x2}, [{0x8, 0x4, 0xee00}, {0x8, 0x6, 0xffffffffffffffff}, {0x8, 0x1}, {0x8, 0x4}, {0x8, 0x0, r3}, {0x8, 0x1, r7}, {0x8, 0x2, r8}, {0x8, 0x4, 0xee01}], {0x10, 0x4}, {0x20, 0x1}}, 0x6c, 0x3) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) 12:43:57 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58d525, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 474.930239][T25070] FAULT_INJECTION: forcing a failure. [ 474.930239][T25070] name failslab, interval 1, probability 0, space 0, times 0 [ 474.959877][T25070] CPU: 0 PID: 25070 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 474.970202][T25070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.980258][T25070] Call Trace: [ 474.983806][T25070] dump_stack+0x1dd/0x24e [ 474.988124][T25070] ? devkmsg_release+0x11c/0x11c [ 474.993052][T25070] ? show_regs_print_info+0x12/0x12 [ 474.998238][T25070] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 475.004292][T25070] should_fail+0x6fb/0x860 [ 475.008698][T25070] ? setup_fault_attr+0x3d0/0x3d0 [ 475.013709][T25070] ? __alloc_skb+0x88/0x4d0 [ 475.018202][T25070] should_failslab+0x5/0x20 [ 475.022775][T25070] kmem_cache_alloc+0x36/0x270 [ 475.027530][T25070] __alloc_skb+0x88/0x4d0 [ 475.031847][T25070] ? skb_put+0x114/0x1e0 [ 475.036075][T25070] __ip6_append_data+0x285e/0x3a90 [ 475.041223][T25070] ? __ip6_append_data+0x2231/0x3a90 [ 475.046557][T25070] ? ip6_setup_cork+0x1470/0x1470 [ 475.051571][T25070] ? ip6_append_data+0x2c0/0x2c0 [ 475.056673][T25070] ? lock_sock_nested+0x27a/0x310 [ 475.061684][T25070] ? xfrm_lookup_route+0x5f/0x170 [ 475.066722][T25070] ip6_append_data+0x1ad/0x2c0 [ 475.071474][T25070] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 475.076744][T25070] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 475.082011][T25070] rawv6_sendmsg+0x1b00/0x2cf0 [ 475.086835][T25070] ? compat_rawv6_ioctl+0x10/0x10 [ 475.091850][T25070] ? selinux_socket_sendmsg+0x11f/0x340 [ 475.097380][T25070] ? memset+0x1f/0x40 [ 475.101347][T25070] ? inet_send_prepare+0x1b7/0x470 [ 475.106457][T25070] ? inet_send_prepare+0x470/0x470 [ 475.111559][T25070] __sys_sendto+0x4f6/0x6c0 [ 475.116051][T25070] ? __ia32_sys_getpeername+0x80/0x80 [ 475.121433][T25070] ? vfs_write+0x427/0x4f0 [ 475.125846][T25070] ? debug_smp_processor_id+0x20/0x20 [ 475.131294][T25070] ? __ia32_sys_read+0x80/0x80 [ 475.136046][T25070] __x64_sys_sendto+0xda/0xf0 [ 475.140799][T25070] do_syscall_64+0xcb/0x150 [ 475.145293][T25070] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 475.151169][T25070] RIP: 0033:0x45e149 [ 475.155051][T25070] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:43:57 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580004, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:57 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58d5d8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 475.174846][T25070] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 475.183710][T25070] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 475.191764][T25070] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 475.199719][T25070] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 475.207852][T25070] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000028 [ 475.215808][T25070] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 475.256043][T25080] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:43:57 executing program 3 (fault-call:1 fault-nth:41): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:57 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x557f, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:57 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58d804, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:57 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580005, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:57 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:57 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @remote, 0x1, 0x6, [@remote, @rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x28) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) 12:43:57 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580006, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:57 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x582d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:57 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58d88b, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 475.645482][T25104] FAULT_INJECTION: forcing a failure. [ 475.645482][T25104] name failslab, interval 1, probability 0, space 0, times 0 [ 475.676271][T25101] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 475.689454][T25104] CPU: 1 PID: 25104 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 475.695589][T25101] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 475.699741][T25104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.699745][T25104] Call Trace: [ 475.699761][T25104] dump_stack+0x1dd/0x24e [ 475.699770][T25104] ? devkmsg_release+0x11c/0x11c [ 475.699779][T25104] ? show_regs_print_info+0x12/0x12 [ 475.699787][T25104] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 475.699800][T25104] should_fail+0x6fb/0x860 [ 475.752646][T25104] ? setup_fault_attr+0x3d0/0x3d0 [ 475.757676][T25104] ? __alloc_skb+0x88/0x4d0 [ 475.762180][T25104] should_failslab+0x5/0x20 [ 475.766685][T25104] kmem_cache_alloc+0x36/0x270 [ 475.771596][T25104] __alloc_skb+0x88/0x4d0 [ 475.775924][T25104] ? skb_put+0x114/0x1e0 [ 475.780167][T25104] __ip6_append_data+0x285e/0x3a90 [ 475.785285][T25104] ? __ip6_append_data+0x2231/0x3a90 [ 475.790577][T25104] ? ip6_setup_cork+0x1470/0x1470 12:43:57 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58d8d5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:57 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580007, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:57 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58da28, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 475.795715][T25104] ? ip6_append_data+0x2c0/0x2c0 [ 475.800665][T25104] ? lock_sock_nested+0x27a/0x310 [ 475.805692][T25104] ? xfrm_lookup_route+0x5f/0x170 [ 475.810881][T25104] ip6_append_data+0x1ad/0x2c0 [ 475.815822][T25104] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 475.821110][T25104] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 475.826498][T25104] rawv6_sendmsg+0x1b00/0x2cf0 [ 475.831409][T25104] ? compat_rawv6_ioctl+0x10/0x10 [ 475.836464][T25104] ? selinux_socket_sendmsg+0x11f/0x340 [ 475.842137][T25104] ? memset+0x1f/0x40 [ 475.846118][T25104] ? inet_send_prepare+0x1b7/0x470 [ 475.851228][T25104] ? inet_send_prepare+0x470/0x470 [ 475.856343][T25104] __sys_sendto+0x4f6/0x6c0 [ 475.860903][T25104] ? __ia32_sys_getpeername+0x80/0x80 [ 475.866278][T25104] ? vfs_write+0x427/0x4f0 [ 475.870699][T25104] ? debug_smp_processor_id+0x20/0x20 [ 475.876246][T25104] ? __ia32_sys_read+0x80/0x80 [ 475.881014][T25104] __x64_sys_sendto+0xda/0xf0 [ 475.885693][T25104] do_syscall_64+0xcb/0x150 [ 475.890400][T25104] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 475.896343][T25104] RIP: 0033:0x45e149 [ 475.900218][T25104] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 475.920038][T25104] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 475.928430][T25104] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 475.936714][T25104] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 12:43:58 executing program 3 (fault-call:1 fault-nth:42): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580008, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58dd09, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x8080) r5 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r2, &(0x7f00000001c0), 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080)='net_prio.ifpriomap\x00', 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000040)) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5832, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) getpeername(0xffffffffffffffff, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x68, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x4, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20020805}, 0x0) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) 12:43:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58ddbc, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) r3 = dup2(r1, r2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x100100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 475.944803][T25104] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 475.952924][T25104] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000029 [ 475.960878][T25104] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:43:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58de6d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x58e5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580009, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58dfc0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 476.047212][T25145] FAULT_INJECTION: forcing a failure. [ 476.047212][T25145] name failslab, interval 1, probability 0, space 0, times 0 [ 476.066566][T25145] CPU: 0 PID: 25145 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 476.076908][T25145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.086959][T25145] Call Trace: [ 476.090257][T25145] dump_stack+0x1dd/0x24e [ 476.094592][T25145] ? devkmsg_release+0x11c/0x11c [ 476.099533][T25145] ? show_regs_print_info+0x12/0x12 [ 476.104733][T25145] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 476.110822][T25145] should_fail+0x6fb/0x860 [ 476.115411][T25145] ? setup_fault_attr+0x3d0/0x3d0 [ 476.120681][T25145] ? __alloc_skb+0x88/0x4d0 [ 476.125190][T25145] should_failslab+0x5/0x20 [ 476.129702][T25145] kmem_cache_alloc+0x36/0x270 [ 476.134473][T25145] __alloc_skb+0x88/0x4d0 [ 476.138805][T25145] ? skb_put+0x114/0x1e0 [ 476.143048][T25145] __ip6_append_data+0x285e/0x3a90 [ 476.148151][T25145] ? __ip6_append_data+0x2231/0x3a90 [ 476.153427][T25145] ? ip6_setup_cork+0x1470/0x1470 [ 476.158723][T25145] ? ip6_append_data+0x2c0/0x2c0 [ 476.163646][T25145] ? lock_sock_nested+0x27a/0x310 [ 476.168704][T25145] ? xfrm_lookup_route+0x5f/0x170 [ 476.173800][T25145] ip6_append_data+0x1ad/0x2c0 [ 476.178640][T25145] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 476.183914][T25145] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 476.189284][T25145] rawv6_sendmsg+0x1b00/0x2cf0 [ 476.194161][T25145] ? compat_rawv6_ioctl+0x10/0x10 [ 476.199179][T25145] ? selinux_socket_sendmsg+0x11f/0x340 [ 476.204717][T25145] ? memset+0x1f/0x40 [ 476.208701][T25145] ? inet_send_prepare+0x1b7/0x470 [ 476.213803][T25145] ? inet_send_prepare+0x470/0x470 [ 476.218909][T25145] __sys_sendto+0x4f6/0x6c0 [ 476.223400][T25145] ? __ia32_sys_getpeername+0x80/0x80 [ 476.228781][T25145] ? vfs_write+0x427/0x4f0 [ 476.233186][T25145] ? debug_smp_processor_id+0x20/0x20 [ 476.238544][T25145] ? __ia32_sys_read+0x80/0x80 [ 476.243367][T25145] __x64_sys_sendto+0xda/0xf0 [ 476.248031][T25145] do_syscall_64+0xcb/0x150 [ 476.252581][T25145] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 476.258468][T25145] RIP: 0033:0x45e149 [ 476.262399][T25145] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 476.282296][T25145] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 476.290694][T25145] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 476.298804][T25145] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 476.306763][T25145] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 476.314728][T25145] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000002a [ 476.322687][T25145] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:43:58 executing program 3 (fault-call:1 fault-nth:43): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5980, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58000a, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58e06f, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 476.355749][T25149] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 476.394788][T25167] FAULT_INJECTION: forcing a failure. 12:43:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5d63, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000340)="00000000000000000000000091b73ef4b8d944a9be6aeaa0d6c47e6c01004000a50900000000000000508a0235fe1cf91cfb885f2e7603f77f11a3cae5f0a7bbc19a6efada", 0x45, 0x4e0}, {&(0x7f00000003c0)="83edf97636ecbca9def81b67ceb708b72945127063408b9785feb12e5303b645aaaa81f25adb9430b45df2ea71af59f8f07ba3b3f74a82287a838030b5228e6be2429a32576282abe6b38f935bb3dba551cb10851efa57b0825c11d94c5c860ac4a4ab7c9ad210fe", 0x68, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x47ff}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) 12:43:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58e405, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5dc5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58e558, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 476.394788][T25167] name failslab, interval 1, probability 0, space 0, times 0 [ 476.410224][T25167] CPU: 0 PID: 25167 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 476.420573][T25167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.430724][T25167] Call Trace: [ 476.434023][T25167] dump_stack+0x1dd/0x24e [ 476.438360][T25167] ? devkmsg_release+0x11c/0x11c [ 476.443305][T25167] ? show_regs_print_info+0x12/0x12 [ 476.448657][T25167] ? csum_and_copy_from_iter_full+0x511/0xc70 12:43:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5f18, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58e5a0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 476.454742][T25167] should_fail+0x6fb/0x860 [ 476.459164][T25167] ? setup_fault_attr+0x3d0/0x3d0 [ 476.464307][T25167] ? __alloc_skb+0x88/0x4d0 [ 476.468817][T25167] should_failslab+0x5/0x20 [ 476.473601][T25167] kmem_cache_alloc+0x36/0x270 [ 476.478522][T25167] __alloc_skb+0x88/0x4d0 [ 476.482855][T25167] ? skb_put+0x114/0x1e0 [ 476.487100][T25167] __ip6_append_data+0x285e/0x3a90 [ 476.492218][T25167] ? __ip6_append_data+0x2231/0x3a90 [ 476.497518][T25167] ? ip6_setup_cork+0x1470/0x1470 [ 476.502548][T25167] ? ip6_append_data+0x2c0/0x2c0 [ 476.507481][T25167] ? lock_sock_nested+0x27a/0x310 [ 476.512596][T25167] ? xfrm_lookup_route+0x5f/0x170 [ 476.518053][T25167] ip6_append_data+0x1ad/0x2c0 [ 476.522810][T25167] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 476.528095][T25167] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 476.533381][T25167] rawv6_sendmsg+0x1b00/0x2cf0 [ 476.538148][T25167] ? compat_rawv6_ioctl+0x10/0x10 [ 476.543175][T25167] ? selinux_socket_sendmsg+0x11f/0x340 [ 476.548868][T25167] ? memset+0x1f/0x40 [ 476.552937][T25167] ? inet_send_prepare+0x1b7/0x470 [ 476.558133][T25167] ? inet_send_prepare+0x470/0x470 [ 476.563242][T25167] __sys_sendto+0x4f6/0x6c0 [ 476.567751][T25167] ? __ia32_sys_getpeername+0x80/0x80 [ 476.573125][T25167] ? vfs_write+0x427/0x4f0 [ 476.577679][T25167] ? debug_smp_processor_id+0x20/0x20 [ 476.583065][T25167] ? __ia32_sys_read+0x80/0x80 [ 476.588067][T25167] __x64_sys_sendto+0xda/0xf0 [ 476.593011][T25167] do_syscall_64+0xcb/0x150 [ 476.597523][T25167] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 476.603580][T25167] RIP: 0033:0x45e149 [ 476.607613][T25167] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 476.627669][T25167] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 476.636215][T25167] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 476.644261][T25167] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 12:43:58 executing program 3 (fault-call:1 fault-nth:44): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6000, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58e803, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58000f, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:58 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f0000000040)="2db1b3102037b3286239165d3a403ae54633", 0x12) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 476.652582][T25167] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 476.660656][T25167] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000002b [ 476.668617][T25167] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 476.727390][T25200] FAULT_INJECTION: forcing a failure. [ 476.727390][T25200] name failslab, interval 1, probability 0, space 0, times 0 [ 476.741572][T25201] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a000c018, mo2=0002] [ 476.743937][T25200] CPU: 0 PID: 25200 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 476.750069][T25201] System zones: 0-11 [ 476.759971][T25200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.759974][T25200] Call Trace: [ 476.759990][T25200] dump_stack+0x1dd/0x24e [ 476.760000][T25200] ? devkmsg_release+0x11c/0x11c [ 476.760008][T25200] ? show_regs_print_info+0x12/0x12 [ 476.760023][T25200] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 476.764545][T25201] EXT4-fs error (device loop4): ext4_quota_enable:5998: comm syz-executor.4: inode #1996090755: comm syz-executor.4: iget: illegal inode # [ 476.774067][T25200] should_fail+0x6fb/0x860 [ 476.774077][T25200] ? setup_fault_attr+0x3d0/0x3d0 [ 476.774092][T25200] ? __alloc_skb+0x88/0x4d0 [ 476.777698][T25201] EXT4-fs error (device loop4): ext4_quota_enable:6000: comm syz-executor.4: Bad quota inode # 1996090755 [ 476.781681][T25200] should_failslab+0x5/0x20 [ 476.781695][T25200] kmem_cache_alloc+0x36/0x270 [ 476.786915][T25201] EXT4-fs warning (device loop4): ext4_enable_quotas:6040: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 476.791800][T25200] __alloc_skb+0x88/0x4d0 [ 476.791811][T25200] ? skb_put+0x114/0x1e0 [ 476.798319][T25201] EXT4-fs (loop4): mount failed [ 476.812436][T25200] __ip6_append_data+0x285e/0x3a90 [ 476.812455][T25200] ? __ip6_append_data+0x2231/0x3a90 [ 476.812467][T25200] ? ip6_setup_cork+0x1470/0x1470 [ 476.812480][T25200] ? ip6_append_data+0x2c0/0x2c0 [ 476.895556][T25200] ? lock_sock_nested+0x27a/0x310 [ 476.900628][T25200] ? xfrm_lookup_route+0x5f/0x170 [ 476.905640][T25200] ip6_append_data+0x1ad/0x2c0 [ 476.910440][T25200] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 476.915714][T25200] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 476.921138][T25200] rawv6_sendmsg+0x1b00/0x2cf0 [ 476.925901][T25200] ? compat_rawv6_ioctl+0x10/0x10 [ 476.931068][T25200] ? selinux_socket_sendmsg+0x11f/0x340 [ 476.936620][T25200] ? memset+0x1f/0x40 [ 476.940742][T25200] ? inet_send_prepare+0x1b7/0x470 [ 476.946019][T25200] ? inet_send_prepare+0x470/0x470 [ 476.951397][T25200] __sys_sendto+0x4f6/0x6c0 [ 476.955885][T25200] ? __ia32_sys_getpeername+0x80/0x80 [ 476.961244][T25200] ? vfs_write+0x427/0x4f0 [ 476.965724][T25200] ? debug_smp_processor_id+0x20/0x20 [ 476.971218][T25200] ? __ia32_sys_read+0x80/0x80 [ 476.975968][T25200] __x64_sys_sendto+0xda/0xf0 [ 476.980632][T25200] do_syscall_64+0xcb/0x150 [ 476.985125][T25200] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 476.991243][T25200] RIP: 0033:0x45e149 [ 476.995312][T25200] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.015530][T25200] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 12:43:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x8400}, {&(0x7f0000000140)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x9}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'netdevsim0\x00', {0x2, 0x0, @local}}) open(&(0x7f0000000340)='./file0\x00', 0x59ffb9ae71927786, 0x0) 12:43:59 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6016, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580010, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58e853, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x10) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:59 executing program 3 (fault-call:1 fault-nth:45): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 477.024062][T25200] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 477.032029][T25200] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 477.039987][T25200] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 477.047943][T25200] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000002c [ 477.055896][T25200] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:43:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580011, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58e99d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 477.112783][T25216] FAULT_INJECTION: forcing a failure. [ 477.112783][T25216] name failslab, interval 1, probability 0, space 0, times 0 [ 477.133015][T25215] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 477.146127][T25216] CPU: 1 PID: 25216 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 477.156305][T25216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.166366][T25216] Call Trace: [ 477.169667][T25216] dump_stack+0x1dd/0x24e [ 477.173997][T25216] ? devkmsg_release+0x11c/0x11c [ 477.178936][T25216] ? show_regs_print_info+0x12/0x12 [ 477.184144][T25216] should_fail+0x6fb/0x860 [ 477.188563][T25216] ? setup_fault_attr+0x3d0/0x3d0 [ 477.193578][T25216] ? __ip6_append_data+0x285e/0x3a90 [ 477.198843][T25216] should_failslab+0x5/0x20 [ 477.203399][T25216] __kmalloc_track_caller+0x5d/0x2c0 [ 477.208666][T25216] ? kmem_cache_alloc+0x1e0/0x270 [ 477.213672][T25216] ? __ip6_append_data+0x285e/0x3a90 [ 477.218943][T25216] __alloc_skb+0xd1/0x4d0 [ 477.223257][T25216] ? skb_put+0x114/0x1e0 [ 477.227485][T25216] __ip6_append_data+0x285e/0x3a90 [ 477.232583][T25216] ? __ip6_append_data+0x2231/0x3a90 [ 477.237853][T25216] ? ip6_setup_cork+0x1470/0x1470 [ 477.242864][T25216] ? ip6_append_data+0x2c0/0x2c0 [ 477.247782][T25216] ? lock_sock_nested+0x27a/0x310 [ 477.252794][T25216] ? xfrm_lookup_route+0x5f/0x170 [ 477.257803][T25216] ip6_append_data+0x1ad/0x2c0 [ 477.262553][T25216] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 477.267908][T25216] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 477.273298][T25216] rawv6_sendmsg+0x1b00/0x2cf0 [ 477.278051][T25216] ? compat_rawv6_ioctl+0x10/0x10 [ 477.283059][T25216] ? selinux_socket_sendmsg+0x11f/0x340 [ 477.288650][T25216] ? memset+0x1f/0x40 [ 477.292621][T25216] ? inet_send_prepare+0x1b7/0x470 [ 477.297717][T25216] ? inet_send_prepare+0x470/0x470 [ 477.302901][T25216] __sys_sendto+0x4f6/0x6c0 [ 477.307527][T25216] ? __ia32_sys_getpeername+0x80/0x80 [ 477.312887][T25216] ? vfs_write+0x427/0x4f0 [ 477.317289][T25216] ? debug_smp_processor_id+0x20/0x20 [ 477.322649][T25216] ? __ia32_sys_read+0x80/0x80 [ 477.327449][T25216] __x64_sys_sendto+0xda/0xf0 [ 477.332113][T25216] do_syscall_64+0xcb/0x150 [ 477.336690][T25216] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.342567][T25216] RIP: 0033:0x45e149 12:43:59 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x60c9, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x635d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58eaf0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 477.346449][T25216] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.366087][T25216] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 477.374485][T25216] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 477.382576][T25216] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 477.390536][T25216] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 477.398547][T25216] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000002d 12:43:59 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x64b0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 477.406507][T25216] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:43:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x43ff}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x7fffffff}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file1\x00', 0x80, 0x123) r0 = socket(0x1, 0xa, 0x3) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000380)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) getsockname$netlink(r1, &(0x7f0000000140), &(0x7f0000000340)=0xc) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) 12:43:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580021, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58ed84, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 477.448313][T25215] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 12:43:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58002b, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58ef35, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 3 (fault-call:1 fault-nth:46): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6547, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58002c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) r5 = eventfd(0x40) splice(r4, &(0x7f0000000080)=0xa99, r5, &(0x7f00000000c0)=0x9, 0x2, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @mss={0x2, 0x100}, @mss={0x2, 0x3}], 0x3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 477.523701][T25243] EXT4-fs error (device loop4): ext4_fill_super:4591: inode #2: comm syz-executor.4: iget: bogus i_mode (101) [ 477.557476][T25243] EXT4-fs (loop4): get root inode failed [ 477.567176][T25243] EXT4-fs (loop4): mount failed 12:43:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58f037, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58f088, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x65fa, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 477.586972][T25253] FAULT_INJECTION: forcing a failure. [ 477.586972][T25253] name failslab, interval 1, probability 0, space 0, times 0 [ 477.606964][T25253] CPU: 0 PID: 25253 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 477.617134][T25253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.627197][T25253] Call Trace: [ 477.630500][T25253] dump_stack+0x1dd/0x24e [ 477.634840][T25253] ? devkmsg_release+0x11c/0x11c [ 477.639786][T25253] ? show_regs_print_info+0x12/0x12 [ 477.644992][T25253] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 477.651070][T25253] should_fail+0x6fb/0x860 [ 477.655670][T25253] ? setup_fault_attr+0x3d0/0x3d0 [ 477.660787][T25253] ? __alloc_skb+0x88/0x4d0 [ 477.665412][T25253] should_failslab+0x5/0x20 [ 477.669939][T25253] kmem_cache_alloc+0x36/0x270 [ 477.674712][T25253] __alloc_skb+0x88/0x4d0 [ 477.679046][T25253] ? skb_put+0x114/0x1e0 [ 477.683391][T25253] __ip6_append_data+0x285e/0x3a90 [ 477.688526][T25253] ? __ip6_append_data+0x2231/0x3a90 [ 477.693903][T25253] ? ip6_setup_cork+0x1470/0x1470 [ 477.699237][T25253] ? ip6_append_data+0x2c0/0x2c0 [ 477.704182][T25253] ? lock_sock_nested+0x27a/0x310 [ 477.708296][T25243] EXT4-fs error (device loop4): ext4_fill_super:4591: inode #2: comm syz-executor.4: iget: bogus i_mode (101) [ 477.709211][T25253] ? xfrm_lookup_route+0x5f/0x170 [ 477.721230][T25243] EXT4-fs (loop4): get root inode failed [ 477.725966][T25253] ip6_append_data+0x1ad/0x2c0 [ 477.725977][T25253] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 477.725989][T25253] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 477.736436][T25243] EXT4-fs (loop4): mount failed [ 477.741734][T25253] rawv6_sendmsg+0x1b00/0x2cf0 [ 477.741749][T25253] ? compat_rawv6_ioctl+0x10/0x10 [ 477.741763][T25253] ? selinux_socket_sendmsg+0x11f/0x340 [ 477.767293][T25253] ? memset+0x1f/0x40 [ 477.771304][T25253] ? inet_send_prepare+0x1b7/0x470 [ 477.776416][T25253] ? inet_send_prepare+0x470/0x470 [ 477.781664][T25253] __sys_sendto+0x4f6/0x6c0 [ 477.786176][T25253] ? __ia32_sys_getpeername+0x80/0x80 [ 477.791549][T25253] ? vfs_write+0x427/0x4f0 [ 477.795984][T25253] ? debug_smp_processor_id+0x20/0x20 [ 477.801354][T25253] ? __ia32_sys_read+0x80/0x80 [ 477.806117][T25253] __x64_sys_sendto+0xda/0xf0 [ 477.810794][T25253] do_syscall_64+0xcb/0x150 [ 477.815298][T25253] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.821623][T25253] RIP: 0033:0x45e149 [ 477.825522][T25253] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.845371][T25253] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 477.853883][T25253] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 477.861846][T25253] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 477.869819][T25253] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 477.878020][T25253] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000002e 12:43:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58f0ea, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x68ad, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58003a, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountstats\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x10, 0x2, 0x2, 0x4, 0x10c0, r0, 0xfff, [], r5, r6, 0x1, 0x1, 0x5}, 0x40) r7 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:43:59 executing program 3 (fault-call:1 fault-nth:47): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:43:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_pts(r0, 0x980) chdir(&(0x7f0000000040)='./file0\x00') r1 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) getdents64(r1, &(0x7f0000000340)=""/124, 0x7c) r2 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r4, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0xc001) readv(r3, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/251, 0xfb}], 0x2) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r5, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x567}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000051) [ 477.885980][T25253] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x68f5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58f401, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58003c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58f4cd, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6a48, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 477.957887][T25279] FAULT_INJECTION: forcing a failure. [ 477.957887][T25279] name failslab, interval 1, probability 0, space 0, times 0 [ 477.972198][T25279] CPU: 0 PID: 25279 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 477.982658][T25279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.992833][T25279] Call Trace: [ 477.996140][T25279] dump_stack+0x1dd/0x24e [ 478.000483][T25279] ? devkmsg_release+0x11c/0x11c 12:44:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58f568, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6d2b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58f620, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6dde, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 478.005428][T25279] ? show_regs_print_info+0x12/0x12 [ 478.010730][T25279] should_fail+0x6fb/0x860 [ 478.015154][T25279] ? setup_fault_attr+0x3d0/0x3d0 [ 478.020183][T25279] ? __ip6_append_data+0x285e/0x3a90 [ 478.025472][T25279] should_failslab+0x5/0x20 [ 478.029981][T25279] __kmalloc_track_caller+0x5d/0x2c0 [ 478.035268][T25279] ? kmem_cache_alloc+0x1e0/0x270 [ 478.040302][T25279] ? __ip6_append_data+0x285e/0x3a90 [ 478.045589][T25279] __alloc_skb+0xd1/0x4d0 [ 478.049925][T25279] ? skb_put+0x114/0x1e0 [ 478.054173][T25279] __ip6_append_data+0x285e/0x3a90 [ 478.059293][T25279] ? __ip6_append_data+0x2231/0x3a90 [ 478.064577][T25279] ? ip6_setup_cork+0x1470/0x1470 [ 478.069735][T25279] ? ip6_append_data+0x2c0/0x2c0 [ 478.074952][T25279] ? lock_sock_nested+0x27a/0x310 [ 478.080342][T25279] ? xfrm_lookup_route+0x5f/0x170 [ 478.085688][T25279] ip6_append_data+0x1ad/0x2c0 [ 478.090436][T25279] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 478.095708][T25279] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 478.101046][T25279] rawv6_sendmsg+0x1b00/0x2cf0 [ 478.105812][T25279] ? compat_rawv6_ioctl+0x10/0x10 [ 478.110829][T25279] ? selinux_socket_sendmsg+0x11f/0x340 [ 478.116650][T25279] ? memset+0x1f/0x40 [ 478.120621][T25279] ? inet_send_prepare+0x1b7/0x470 [ 478.125717][T25279] ? inet_send_prepare+0x470/0x470 [ 478.130974][T25279] __sys_sendto+0x4f6/0x6c0 [ 478.135615][T25279] ? __ia32_sys_getpeername+0x80/0x80 [ 478.140974][T25279] ? vfs_write+0x427/0x4f0 [ 478.145464][T25279] ? debug_smp_processor_id+0x20/0x20 [ 478.150903][T25279] ? __ia32_sys_read+0x80/0x80 [ 478.156805][T25279] __x64_sys_sendto+0xda/0xf0 [ 478.161468][T25279] do_syscall_64+0xcb/0x150 [ 478.165961][T25279] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 478.171834][T25279] RIP: 0033:0x45e149 [ 478.175828][T25279] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 478.195641][T25279] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 478.204081][T25279] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 478.212037][T25279] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 478.219992][T25279] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 478.227946][T25279] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000002f [ 478.235900][T25279] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:00 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x20800, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x8006}, {r3, 0x2000}], 0x2, &(0x7f0000000100), &(0x7f0000000140)={[0xffffffffffffffff]}, 0x8) r4 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) write(r5, &(0x7f0000000300)="7e5f816cfd348daf5639a8279da9a321cd07c13a4bbdbbb097baea146bb28789b6f001eb6f4a31f52c92c527e20da165b4edf5a6b4285159a6f192550d7f2650a09102fb372c155445485b0421d28d17e0af946d4c907b201b53412cd844be688ab2fa58562b8b4e904a32fc9627402c7249fed10bda1d34fac3709f32cc94f0496ee603d35e8a4e2cf036e33b145031b4041fe2f3ec515e963309561dd138d366c31079e3ceb76577ed8919692b3fdb17e28292a44e1e581dc18fcbe6bdb81435fd9befa8d15de60dacd69472046687cf0a31747ac4f5adb389fccee321dcc732ab12900b882e9a5eeaebd4b2dd6e3adc899ade41527ee0ef4b9f6b6ea642cde166e654502e6736114b6661b54ee21961fc821fab7e20a6aee72cb122487df49a8746f403bdfb093e4863977091d23f5a94973fe8eac5489bbf6e725ac36f6ed59aa7d28b3d132cd6593d3b763276c6e721e469105ed1908b4817c004c451d0f7307661ba793d4abb91128d8e6fd38f84321116366763c8bba314488fff2765300cc49cecb90d5ebdc031ca13e462fcf5541311333eb65d45a3ce5c6b9e41d1fcc870af495df2d1cc3ba1c5451e4dfec686f84fac4bc03bb6adcd564f944cfc22370e26e9f863286ae1276c6ac48b644673121246f9b3795b9dfd69987eb1f95a7a24b3f5ada1b86b946fcf662597b59dc49dac324674586c6765248372138bd26efa6800913d97b5be293ecb37d4bed7b1bcd00e2e46ef2c8d34155f7b962ffb9c17ff357cdb6b0d7de1e4858b4c92134547b5635fb0ec3949bb03bac22f10d5c3a52b3008d652cfe56142c04c00381220d08d107762370fa914261193cdf426688de19d9d0e28ca3370b46aa8e51ed8b96ac21f762ad404a5a67e4015f8897f861e8160675d8f5b81cbf6563065db5226b279c53e12b45050153f493a34028ef8504a3d4893fba6a0a8f02ef8b521809136bc40c47d0e250d687a090387d8b1c1df4f7a379a5185e9aa637d90c1bf4520081901062c5eecda805939ffb5d4d32d76e571d148e06a9180387de8af66fd795c17a0470c38eb74eb8ca19ff8fd79ae3e807beaaceb45f580cf50c34e2b6e55009fb61ee95a58458a10fb834c09bb73a164a26b14549c0222a719c50365392c1192c42a298ef5094bc40561537f3d26d5533d91fa0ed7251e6ee028fc0b9a70a2e77eafe8c69d6e51cfe80219e29ef97420bb78ad7482750aca74f4ad2ff0a888385fbd43bc0ff7e593fce89c80a61ead6e7f1a7f681d683d16101354531e16c6066c26aff84fc9f325bac69f3a76faf83eb6d86ae90e8e8b8b71c0011b24726160a80fd91e44bd61adb480c9ad52f7f3f0367d0e38a0389bf6eadc930b0ac3d715b7dd0055f59a323963a5f5f1cb0abdf5d30f65ea1e1ea5943d9cfcab29e63eaa23272f8d8339eeecd7beb9ac2f6d28a6759319d8738d3930abee9dbf8471fdeacc3c256399124bd0649dbf70627c7cea981a47533b80b2f5d487e8937dcd85e75e55e570f1996bba25cbbf5de05ee0064065e3942364d9b2e99d16f144dad20899b2e966763d4aa2e0f4b4cf7a95d8a278bb469e84c7ad1c06bcc0f1935bc9824f0268da02b78b6a460b23a9cc08a7bdb53b295139f0db6a1e487ab0c6edd411cd3007b9b2d86bf7d83f232a17c442f60f43787eddb00bb371bbfeb15b468709b5190f7a9223b49d1f3fb52784b153fefdb637a352b471cc559a9fa166bcb91267605213de46b6db0be36612912944387d146d5bd7c091886ac88048177e838333e6c3b63a335defcf719e8aa379307cf3b722d52e2b291ce58ce03a3e652a696af2a13ee6dc08433432c64f8063c17722678dab4d4376c860255c04916b967ef1c578332ebcd9ebf48a5cbbc0f3b3f6b9a6354f0171d1e9a2d531bdd73d75804e4c9dcf090ef17a51e29a8f9f825b4df3459e2f5bf60c9a652e1f22247b348ec162169fe30fd7a9a053c67b6434c06cee645604dd245fa42f49705dd6dd9b6be8dec91e5a85b5e1cc71c8b7d69c4012a3c83fdedfd1464c20d54bbe9ab9abc0a5f70916ed2e80f3b58b9d9daacf674281638e92f09ded2991cd6ea6cf0ceab3bc4173479a38486eb4f21b45c0142b392de7c96f7c1b5cc7ef603684295730b15e2c0cbd24cae64b4e0903f74210bc3a5c9ecfd244c6bfceafd08dc3fd04dad98cccd566938fd9dd9cae3a3331315660e6792b427681d2f21fc73dd1125778785522bd82457f7dda6e5617270f4f60698d57af9651d4511788f03686a2ff9ed71de834b988ef5da8a85c82602affe3eb136725115c433f9c69efa11e019c6d278918a83742a6c77137249f829fa166cda808b6511f9504ac3088e64349ea1c1ec2d4d4479e49de856fefa751bbb6e4dbd1cb73ed8333379f7ee2620c91a8a4dac48d2eb51b29732740d5a5c653725c247cec958ddd9a4b87b0767d31f87452b644ea3d904a7b073334b4763bae77c99feee692ac3876a366b72ea2e1339426f96934a07b48e8133507138a4d486c4e3ff4d6abea6d2f7d57074dbb5e3ec91971536c1962f5f963df0e64f811745103d88fc470281a055b2e773b50a1efea44bdc0388d0a882d5dded586dacefa578ff68dc27d9443d608e8a2ef9e2ea593d29450510de9caaec32089277bd900d27b918e3fbe62e5b10c42358896c0c555684eddb5a60bed648673ce2f3f2282c3138f8e17c4f57bb86f2896942931ed351f5892213be40df981f9378d44a737fde0d6c5f723d5b96f32815aa1ac7e8e313732276f9a7dfc74ae89821972028fecf6971f62bc89ac28c3d85660f7c94188011d86928b799db543ebda76f2e266b8e0411a9bee1ab5a920377da5124c1849e3b17eb804ed32ed586fd87fe5787d74a6c9c1a8127f4c8f35330b52d12407f42cf436fdec9819ee2333e3a4ea662ea50c9bd4e1fe0900e222f4ac7d0ac81d5f04c019020b0b6063731020928110b51b2471a489a80a26e5f54c3e0b0b03262a08ee229a7fa25e292256f1a5e6e03e61cd2f33202352af8a7d72f016ea79dedaac085e64a552f1be8fa9f170bbc7f11cb54fc709f71c8cc057a63b0c015179fb3c68b14b9a0a75f892dd7eadbb38804d9facaf41b78cb95f1109ea6d13e6a6d5d4fdbff9b1acc51718dadedc01d77e711c4b9a4c81f7c03b1117792438749efc1480b0c89afe2f7399fbfdf6e2976ba855aa253ce4ab0ea2627474c1ba3bcc83d7a215eee38d63932e8f2625f6cd03fc25b47df2a58820698dd7523b8c7721214e6b56ef5e2ea8c0b77508b01824976318a9e0cc8bca336575d3a961d6e3db815c508512724885081657a922b8b93fe6fff3a7acaf448203c92a3ec374b4a5db148da54504f0f2391bfc60c959536f746afdc5ce85edd2dc8129a4ad0424aa58d3219b4c83184b12698bd7e9275fcae2b23bccce8cc0574ded07e54111abb236d975885513804ae99f2c2c15dbfca909f1c92b2ee0dde07de135cc1cdc61cb53e2f0febd2b823b7c7f9a30664713b92266633d7d5c965ed25a4e63759dc72ce7bffa0040576e5c47afe047b846ba38b18ba39775be15b79e9b308f2627cfcd8a00e7cb6021f2a48f9b9901b868f138ad599d9a39c49dfc96158931d3a384fe3a2f4d241870a1fdcef30ff0c53d1b6418b96ece13780a576c980dd6007a5aac99819e3c6c4528807750504a9b433c9cbbc377ec742d27f2a53f93fdbb6fd10323987dacab9ae131da73a2a9243cf1284ca5d536b8c45180276d264e31ee61479c68a1fab2669edcf50f64ce8e1433cab6f3a8029a5583fb6e071509e1b145becfa3cc3ed8d9ed23ca5e0d996652c6c6d6a77efe305f39653f36dd3837190127b2f81464abd13e0603d4d2dbb3fd1bc399821510210fdb0cb8ef70b11bdf25ed652ac5c7e3cf4e55ed7b4cbe1f3d8fe3e1378703f85de42fb4edeaec490ac0b6741a3cef317f330e4a7c1ade4b5fa71d6d37b02983edda51b5998507149f0ec70dab18974ce58ab41570f46632aa22f51b85ca99a51031dd0ee66c34293adb1778986a376812a87df0679503b898e5020243a6da201754cbe2ebc51104d710bf735ed866cf0191bb203566b8f38972cd28d815705134ba4bbfb1c5dd369c5d1377b7fcc494e76d11379d75d6675685c46046496d867c990351c9b9c6a471efb4270778ba75e2da8b11c6b038c19bf12bbdc34a79ee1c5bf1edf59dd00e1af7a2db644cc303215273813b96a7928b897691afbde2e999a31b872d7880dfd8a77497ba1d6193395bed7544c659d97aa9089fa1f69354a3269c42f4608ecfcbefc5bd56bfdc1778a8cecee01affc745b3c9a73e466bcf0e5fb1ef7f4837bbac2bfbff5d356d54052956d050caeb4e2758312d70e896f3e3445d0f64d46903fad60ab415860bf1146c788cee2e247ae4728da21c2fdff57dca471921f7bc2a87657003e90f07fb12bce4667ced7d7af60fbd1911f9122b6cfe27d0a966395c7788adfd75fc2de0f331893ecfa28b1b510076cde6860f3d9e3edaaa45737651c2031f45fe82b5b3affc1054a2145409e10daa779ff3ede79cd580cba4c36ca7929f14c33b6ff613d04e36648f9fc10cff434347b09a058855a17ae0a78ac895f3d326de32aa6f488875992becfb079412a35e673fbdb8b71734caf58b4da80a1e3879ab6cdfcf6d41c7f1fa508ec6e09692c66c3b55f03c51dee705ac195219c96c65c1bba2f13c0e156386c25bfc34d670c47e156e577d2f12e1464002e5cb7415be5bf237cb65413831d85b22f3a692ddb8413c197f69d643206676db772f3a9ae6a8df0b615e298b14c43300421bd2a5d2a7b31292f5d664727dec83021d89bd1d6832a845f8b5211398c50f99e47e6da333c80fa23d11d04070aa03cbc5f768780e371dee22e61c2f423f482b0e36c40563ecd9a3cd087adffc1ab3182c1aa181095005c2ee7857f5b5325cb6f51a60c7edd9abc12acd1b0de72a6dd55d6a13bbfb43752eecf567d917567ef21e1bb8336c27a031ebe28cc762e4b2a07883c7ca65e0f9329b91a34590a6c30f43fc4af53cf5e5ceebc932b4e697209de1d8386d2ab9fe59128ec55f239b53abdea23ffe157e9d8c8be0299d90fe423bd4dc4a077e9c760290d81d88260c99db5f747cb45f52868b6f8cdd7b2638eaf2be96579a0f011831f711a412018176a2bce2044124ee4bdb70bedb7b940c6abbef46cea530dd2067971e2d34c248d8d22975baeb8d51c89c283c1331776c2e1393bb8922b8b9d301b6aa8a5c2e9ecf7db037840b953e16136cec2e355039fc73b373a7c7ee72f3d4b689ece15be9982d0e3cd7ba920262302feca0289f1c6cb82e7dc85e3dea068cb45c575adc8ab588265ee0e0a18153b3cd2ad0111e8bccd0b4213afe31efdd54e0e8f3e1697739bc81862e3f6a58cde1ce70126fea53126ba2e2110e31abecf89e3900964486592d9c251c801dc5be86aeb308a507ae64e89eb1c81e30bfeee6150179548a8c05d74e773bb2463b542e19c5a3131374b4a4fa97ee28203f21f4cd367ed8cbb5ffca88515cc4d564f25483d6f9a9be1ad38f6b2948c5fdc7e088e98521613df0099f925f0b4cba9e349d97aa007375c52da3463e3315dec51c2edd606eeb8d9a60d4a57073cb5ed2383dd7f9cbf0d30a15ffb74a1d2deba09f753cf801f269507c174658464e7b0104e8ab1afb6acddfebb5b6cc5940ec3b475ae6510038edafb550379c20fb274d8c449e859cc705e0567a808fd7ef18bf707699e959125167b6db067926", 0x1000) 12:44:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58f81b, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) quotactl(0x1, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)="ea33625cdd3b1538c542db5666df712a526f77fa27b067d2497de9aeb77de7ea47615181ee2bb4b4c65f53ca3fe6402683f7766f5e25e46cd307e388f18a14efdecdc0ba808961594b8b20a0e3a634b8c84815dbd598138bcc0427bdafd3c45aea3618ed5dfdf5316f409d3b7dbdcdb7df126a719b25dfc34901777c440498d7e70ab56f55ab828cca3ad4cce0a804738ad615c1836dc5108e2e1c833858a0f8c0838608520ff219cfecf57e10afbc4efa7bcf883204d743dcbc698f4f95ba18f24bb144db04bacd04efcedb87df0ec08d31454d8efbd8becbddea1e84509745edb9b0c521fc76c0198a786bd5d0") 12:44:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6e8d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 3 (fault-call:1 fault-nth:48): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580060, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58f8ce, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ptrace$setopts(0x4206, 0x0, 0x1000, 0x26) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(r3, 0x0, 0x0, 0x80000) openat$cgroup(r3, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78) 12:44:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6fe0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7091, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 478.752242][T25280] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 478.777867][T25324] FAULT_INJECTION: forcing a failure. [ 478.777867][T25324] name failslab, interval 1, probability 0, space 0, times 0 12:44:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7425, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x750f, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7578, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x75c2, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 478.800451][T25324] CPU: 0 PID: 25324 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 478.810609][T25324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.820651][T25324] Call Trace: [ 478.823966][T25324] dump_stack+0x1dd/0x24e [ 478.828289][T25324] ? devkmsg_release+0x11c/0x11c [ 478.833221][T25324] ? show_regs_print_info+0x12/0x12 [ 478.838410][T25324] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 478.844471][T25324] should_fail+0x6fb/0x860 [ 478.848881][T25324] ? setup_fault_attr+0x3d0/0x3d0 [ 478.853898][T25324] ? __alloc_skb+0x88/0x4d0 [ 478.858391][T25324] should_failslab+0x5/0x20 [ 478.862877][T25324] kmem_cache_alloc+0x36/0x270 [ 478.867623][T25324] __alloc_skb+0x88/0x4d0 [ 478.871939][T25324] ? skb_put+0x114/0x1e0 [ 478.876217][T25324] __ip6_append_data+0x285e/0x3a90 [ 478.881303][T25324] ? __ip6_append_data+0x2231/0x3a90 [ 478.886558][T25324] ? ip6_setup_cork+0x1470/0x1470 [ 478.891607][T25324] ? ip6_append_data+0x2c0/0x2c0 [ 478.896545][T25324] ? lock_sock_nested+0x27a/0x310 [ 478.901550][T25324] ? xfrm_lookup_route+0x5f/0x170 [ 478.906540][T25324] ip6_append_data+0x1ad/0x2c0 [ 478.911276][T25324] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 478.916630][T25324] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 478.921883][T25324] rawv6_sendmsg+0x1b00/0x2cf0 [ 478.926626][T25324] ? compat_rawv6_ioctl+0x10/0x10 [ 478.931623][T25324] ? selinux_socket_sendmsg+0x11f/0x340 [ 478.937136][T25324] ? memset+0x1f/0x40 [ 478.941087][T25324] ? inet_send_prepare+0x1b7/0x470 [ 478.946168][T25324] ? inet_send_prepare+0x470/0x470 [ 478.951247][T25324] __sys_sendto+0x4f6/0x6c0 [ 478.955767][T25324] ? __ia32_sys_getpeername+0x80/0x80 [ 478.961225][T25324] ? vfs_write+0x427/0x4f0 [ 478.965612][T25324] ? debug_smp_processor_id+0x20/0x20 [ 478.970957][T25324] ? __ia32_sys_read+0x80/0x80 [ 478.975695][T25324] __x64_sys_sendto+0xda/0xf0 [ 478.980341][T25324] do_syscall_64+0xcb/0x150 [ 478.984812][T25324] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 478.990691][T25324] RIP: 0033:0x45e149 [ 478.994575][T25324] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 479.014171][T25324] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 479.022555][T25324] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 479.030496][T25324] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 479.038457][T25324] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 479.046396][T25324] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000030 [ 479.054333][T25324] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) lseek(r0, 0xb1, 0x0) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) 12:44:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58fa65, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:01 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7800, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580064, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:01 executing program 3 (fault-call:1 fault-nth:49): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 479.106947][T25345] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 479.133328][T25345] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 479.182901][T25361] FAULT_INJECTION: forcing a failure. [ 479.182901][T25361] name failslab, interval 1, probability 0, space 0, times 0 [ 479.198490][T25361] CPU: 1 PID: 25361 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 479.208640][T25361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.218685][T25361] Call Trace: [ 479.221967][T25361] dump_stack+0x1dd/0x24e [ 479.226289][T25361] ? devkmsg_release+0x11c/0x11c [ 479.231218][T25361] ? show_regs_print_info+0x12/0x12 [ 479.236409][T25361] should_fail+0x6fb/0x860 [ 479.240814][T25361] ? setup_fault_attr+0x3d0/0x3d0 [ 479.245816][T25361] ? __ip6_append_data+0x285e/0x3a90 [ 479.251186][T25361] should_failslab+0x5/0x20 [ 479.255667][T25361] __kmalloc_track_caller+0x5d/0x2c0 [ 479.260924][T25361] ? kmem_cache_alloc+0x1e0/0x270 [ 479.265920][T25361] ? __ip6_append_data+0x285e/0x3a90 [ 479.271177][T25361] __alloc_skb+0xd1/0x4d0 [ 479.275479][T25361] ? skb_put+0x114/0x1e0 [ 479.279693][T25361] __ip6_append_data+0x285e/0x3a90 [ 479.284778][T25361] ? __ip6_append_data+0x2231/0x3a90 [ 479.290054][T25361] ? ip6_setup_cork+0x1470/0x1470 [ 479.295052][T25361] ? ip6_append_data+0x2c0/0x2c0 [ 479.299959][T25361] ? lock_sock_nested+0x27a/0x310 [ 479.304956][T25361] ? xfrm_lookup_route+0x5f/0x170 [ 479.309952][T25361] ip6_append_data+0x1ad/0x2c0 [ 479.314689][T25361] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 479.319943][T25361] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 479.325199][T25361] rawv6_sendmsg+0x1b00/0x2cf0 [ 479.329937][T25361] ? compat_rawv6_ioctl+0x10/0x10 [ 479.334936][T25361] ? selinux_socket_sendmsg+0x11f/0x340 [ 479.340462][T25361] ? memset+0x1f/0x40 [ 479.344416][T25361] ? inet_send_prepare+0x1b7/0x470 [ 479.349498][T25361] ? inet_send_prepare+0x470/0x470 [ 479.354580][T25361] __sys_sendto+0x4f6/0x6c0 [ 479.359055][T25361] ? __ia32_sys_getpeername+0x80/0x80 [ 479.364399][T25361] ? vfs_write+0x427/0x4f0 [ 479.368816][T25361] ? debug_smp_processor_id+0x20/0x20 [ 479.374159][T25361] ? __ia32_sys_read+0x80/0x80 [ 479.378893][T25361] __x64_sys_sendto+0xda/0xf0 [ 479.383541][T25361] do_syscall_64+0xcb/0x150 [ 479.388022][T25361] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 479.393886][T25361] RIP: 0033:0x45e149 [ 479.397753][T25361] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 479.417435][T25361] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 479.425815][T25361] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 479.433757][T25361] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 479.441824][T25361] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 479.449766][T25361] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000031 [ 479.457708][T25361] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 479.495646][T25364] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:44:01 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7875, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58fbb8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580078, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:01 executing program 3 (fault-call:1 fault-nth:50): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:01 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x80, 0x4) dup2(r2, r2) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x1, 0x7, 0x80, 0x3, 0x0, 0x1, 0x180c, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x81, 0x5}, 0x8000, 0x9, 0x2, 0x0, 0x7fff, 0x8, 0x7}, 0xffffffffffffffff, 0x9, r1, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x20, 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/18, 0x12}], 0x2, 0x6, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:01 executing program 4: ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000140)={0xfb}) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) 12:44:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5800b3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:01 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x79bd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 479.598445][T25379] FAULT_INJECTION: forcing a failure. [ 479.598445][T25379] name failslab, interval 1, probability 0, space 0, times 0 [ 479.622077][T25379] CPU: 1 PID: 25379 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 479.632232][T25379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.642274][T25379] Call Trace: 12:44:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58fc00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5800fc, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580103, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5801f4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58fd4c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58fe80, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 479.645564][T25379] dump_stack+0x1dd/0x24e [ 479.649890][T25379] ? devkmsg_release+0x11c/0x11c [ 479.654819][T25379] ? show_regs_print_info+0x12/0x12 [ 479.660011][T25379] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 479.666075][T25379] should_fail+0x6fb/0x860 [ 479.670489][T25379] ? setup_fault_attr+0x3d0/0x3d0 [ 479.675509][T25379] ? __alloc_skb+0x88/0x4d0 [ 479.680000][T25379] should_failslab+0x5/0x20 [ 479.684495][T25379] kmem_cache_alloc+0x36/0x270 [ 479.689249][T25379] __alloc_skb+0x88/0x4d0 [ 479.693568][T25379] ? skb_put+0x114/0x1e0 [ 479.697816][T25379] __ip6_append_data+0x285e/0x3a90 [ 479.702919][T25379] ? __ip6_append_data+0x2231/0x3a90 [ 479.708180][T25379] ? ip6_setup_cork+0x1470/0x1470 [ 479.713177][T25379] ? ip6_append_data+0x2c0/0x2c0 [ 479.718085][T25379] ? lock_sock_nested+0x27a/0x310 [ 479.723097][T25379] ? xfrm_lookup_route+0x5f/0x170 [ 479.728094][T25379] ip6_append_data+0x1ad/0x2c0 [ 479.732835][T25379] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 479.738093][T25379] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 479.743349][T25379] rawv6_sendmsg+0x1b00/0x2cf0 [ 479.748088][T25379] ? compat_rawv6_ioctl+0x10/0x10 [ 479.753091][T25379] ? selinux_socket_sendmsg+0x11f/0x340 [ 479.758610][T25379] ? memset+0x1f/0x40 [ 479.762563][T25379] ? inet_send_prepare+0x1b7/0x470 [ 479.767645][T25379] ? inet_send_prepare+0x470/0x470 [ 479.772728][T25379] __sys_sendto+0x4f6/0x6c0 [ 479.777205][T25379] ? __ia32_sys_getpeername+0x80/0x80 [ 479.782566][T25379] ? vfs_write+0x427/0x4f0 [ 479.786955][T25379] ? debug_smp_processor_id+0x20/0x20 [ 479.792298][T25379] ? __ia32_sys_read+0x80/0x80 [ 479.797036][T25379] __x64_sys_sendto+0xda/0xf0 [ 479.801686][T25379] do_syscall_64+0xcb/0x150 [ 479.806162][T25379] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 479.812025][T25379] RIP: 0033:0x45e149 [ 479.815892][T25379] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 479.835494][T25379] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 12:44:01 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7b10, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 479.843875][T25379] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 479.851823][T25379] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 479.859768][T25379] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 479.867708][T25379] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000032 [ 479.875651][T25379] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:01 executing program 3 (fault-call:1 fault-nth:51): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 479.909775][T25381] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 479.927623][T25410] FAULT_INJECTION: forcing a failure. [ 479.927623][T25410] name failslab, interval 1, probability 0, space 0, times 0 [ 479.943119][T25410] CPU: 0 PID: 25410 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 479.953269][T25410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.963481][T25410] Call Trace: [ 479.966746][T25410] dump_stack+0x1dd/0x24e [ 479.971045][T25410] ? devkmsg_release+0x11c/0x11c [ 479.975957][T25410] ? show_regs_print_info+0x12/0x12 [ 479.981126][T25410] should_fail+0x6fb/0x860 [ 479.985529][T25410] ? setup_fault_attr+0x3d0/0x3d0 [ 479.990544][T25410] ? __ip6_append_data+0x285e/0x3a90 [ 479.995797][T25410] should_failslab+0x5/0x20 [ 480.000273][T25410] __kmalloc_track_caller+0x5d/0x2c0 [ 480.005527][T25410] ? kmem_cache_alloc+0x1e0/0x270 [ 480.010533][T25410] ? __ip6_append_data+0x285e/0x3a90 [ 480.015791][T25410] __alloc_skb+0xd1/0x4d0 [ 480.020100][T25410] ? skb_put+0x114/0x1e0 [ 480.024313][T25410] __ip6_append_data+0x285e/0x3a90 [ 480.029415][T25410] ? __ip6_append_data+0x2231/0x3a90 [ 480.034718][T25410] ? ip6_setup_cork+0x1470/0x1470 [ 480.039713][T25410] ? ip6_append_data+0x2c0/0x2c0 [ 480.044636][T25410] ? lock_sock_nested+0x27a/0x310 [ 480.049631][T25410] ? xfrm_lookup_route+0x5f/0x170 [ 480.054623][T25410] ip6_append_data+0x1ad/0x2c0 [ 480.059355][T25410] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 480.064606][T25410] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 480.069856][T25410] rawv6_sendmsg+0x1b00/0x2cf0 [ 480.074631][T25410] ? compat_rawv6_ioctl+0x10/0x10 [ 480.079626][T25410] ? selinux_socket_sendmsg+0x11f/0x340 [ 480.085145][T25410] ? memset+0x1f/0x40 [ 480.089096][T25410] ? inet_send_prepare+0x1b7/0x470 [ 480.094173][T25410] ? inet_send_prepare+0x470/0x470 [ 480.099271][T25410] __sys_sendto+0x4f6/0x6c0 [ 480.103845][T25410] ? __ia32_sys_getpeername+0x80/0x80 [ 480.109188][T25410] ? vfs_write+0x427/0x4f0 [ 480.113574][T25410] ? debug_smp_processor_id+0x20/0x20 [ 480.118922][T25410] ? __ia32_sys_read+0x80/0x80 [ 480.123658][T25410] __x64_sys_sendto+0xda/0xf0 [ 480.128338][T25410] do_syscall_64+0xcb/0x150 [ 480.132814][T25410] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 480.138727][T25410] RIP: 0033:0x45e149 [ 480.142592][T25410] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 480.163901][T25410] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 480.172334][T25410] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 480.180275][T25410] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 480.188219][T25410] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 480.196258][T25410] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000033 [ 480.204203][T25410] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:02 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x1bf) read(r0, &(0x7f0000000040)=""/263, 0x107) 12:44:02 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7da6, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:02 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d58ff00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:02 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580220, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:02 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0xfff}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af315000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) 12:44:02 executing program 3 (fault-call:1 fault-nth:52): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:02 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7f55, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:02 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x98050000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 480.475615][T25425] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 50331648)! [ 480.486813][T25425] EXT4-fs (loop4): group descriptors corrupted! [ 480.495025][T25427] FAULT_INJECTION: forcing a failure. [ 480.495025][T25427] name failslab, interval 1, probability 0, space 0, times 0 12:44:02 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000480)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) accept4$unix(r1, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xc4, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x448b65b1, 0x6c}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xb}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0xd981}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x4}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x3}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x8}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x81}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x9}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x54}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x375}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x9}, @NL80211_MESHCONF_FORWARDING={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xf1}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x39}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10000, 0x6b}}, @NL80211_ATTR_IFINDEX={0x8}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) 12:44:02 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x2, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:02 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x8059, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 480.519010][T25427] CPU: 0 PID: 25427 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 480.529174][T25427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.539249][T25427] Call Trace: [ 480.542538][T25427] dump_stack+0x1dd/0x24e [ 480.546862][T25427] ? devkmsg_release+0x11c/0x11c [ 480.551787][T25427] ? show_regs_print_info+0x12/0x12 [ 480.556960][T25427] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 480.563013][T25427] should_fail+0x6fb/0x860 [ 480.567682][T25427] ? setup_fault_attr+0x3d0/0x3d0 [ 480.572680][T25427] ? __alloc_skb+0x88/0x4d0 [ 480.577153][T25427] should_failslab+0x5/0x20 [ 480.581627][T25427] kmem_cache_alloc+0x36/0x270 [ 480.586363][T25427] __alloc_skb+0x88/0x4d0 [ 480.590661][T25427] ? skb_put+0x114/0x1e0 [ 480.594876][T25427] __ip6_append_data+0x285e/0x3a90 [ 480.599961][T25427] ? __ip6_append_data+0x2231/0x3a90 [ 480.605218][T25427] ? ip6_setup_cork+0x1470/0x1470 [ 480.610220][T25427] ? ip6_append_data+0x2c0/0x2c0 [ 480.615125][T25427] ? lock_sock_nested+0x27a/0x310 [ 480.620119][T25427] ? xfrm_lookup_route+0x5f/0x170 [ 480.625114][T25427] ip6_append_data+0x1ad/0x2c0 [ 480.629848][T25427] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 480.635104][T25427] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 480.640364][T25427] rawv6_sendmsg+0x1b00/0x2cf0 [ 480.645103][T25427] ? compat_rawv6_ioctl+0x10/0x10 [ 480.650103][T25427] ? selinux_socket_sendmsg+0x11f/0x340 [ 480.655621][T25427] ? memset+0x1f/0x40 [ 480.659576][T25427] ? inet_send_prepare+0x1b7/0x470 [ 480.664657][T25427] ? inet_send_prepare+0x470/0x470 [ 480.669739][T25427] __sys_sendto+0x4f6/0x6c0 [ 480.674214][T25427] ? __ia32_sys_getpeername+0x80/0x80 [ 480.679560][T25427] ? vfs_write+0x427/0x4f0 [ 480.683951][T25427] ? debug_smp_processor_id+0x20/0x20 [ 480.689326][T25427] ? __ia32_sys_read+0x80/0x80 [ 480.694060][T25427] __x64_sys_sendto+0xda/0xf0 [ 480.698709][T25427] do_syscall_64+0xcb/0x150 [ 480.703187][T25427] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 480.709059][T25427] RIP: 0033:0x45e149 [ 480.712926][T25427] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 480.732499][T25427] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 480.740883][T25427] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 480.748835][T25427] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 480.756778][T25427] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 480.764735][T25427] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000034 12:44:02 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580300, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 480.772783][T25427] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 480.827907][T25441] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 480.838900][T25441] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 480.853715][T25441] __quota_error: 18 callbacks suppressed [ 480.853719][T25441] Quota error (device loop4): write_blk: dquota write failed [ 480.866851][T25441] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 480.924015][T25449] Quota error (device loop4): write_blk: dquota write failed [ 480.931475][T25449] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:03 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580301, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:03 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x80a8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:03 executing program 3 (fault-call:1 fault-nth:53): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:03 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x1, 0x0) write(r1, &(0x7f00000001c0), 0xffffff0f) socketpair(0x11, 0x40000, 0x6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x68, r5, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x1, @link='syz0\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x4085) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:03 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x3, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:03 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5803e8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:03 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x80fe, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:03 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x84ed, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 481.281069][T25456] FAULT_INJECTION: forcing a failure. [ 481.281069][T25456] name failslab, interval 1, probability 0, space 0, times 0 [ 481.297636][T25456] CPU: 0 PID: 25456 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 481.307904][T25456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 481.317948][T25456] Call Trace: [ 481.321233][T25456] dump_stack+0x1dd/0x24e [ 481.325557][T25456] ? devkmsg_release+0x11c/0x11c [ 481.330493][T25456] ? show_regs_print_info+0x12/0x12 [ 481.335687][T25456] should_fail+0x6fb/0x860 [ 481.340104][T25456] ? setup_fault_attr+0x3d0/0x3d0 [ 481.345124][T25456] ? __ip6_append_data+0x285e/0x3a90 [ 481.350396][T25456] should_failslab+0x5/0x20 [ 481.354896][T25456] __kmalloc_track_caller+0x5d/0x2c0 [ 481.360162][T25456] ? kmem_cache_alloc+0x1e0/0x270 [ 481.365156][T25456] ? __ip6_append_data+0x285e/0x3a90 [ 481.370414][T25456] __alloc_skb+0xd1/0x4d0 [ 481.374714][T25456] ? skb_put+0x114/0x1e0 [ 481.378930][T25456] __ip6_append_data+0x285e/0x3a90 [ 481.384012][T25456] ? __ip6_append_data+0x2231/0x3a90 [ 481.389288][T25456] ? ip6_setup_cork+0x1470/0x1470 [ 481.394368][T25456] ? ip6_append_data+0x2c0/0x2c0 [ 481.399319][T25456] ? lock_sock_nested+0x27a/0x310 [ 481.404315][T25456] ? xfrm_lookup_route+0x5f/0x170 [ 481.409307][T25456] ip6_append_data+0x1ad/0x2c0 [ 481.414041][T25456] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 481.419294][T25456] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 481.424546][T25456] rawv6_sendmsg+0x1b00/0x2cf0 [ 481.429281][T25456] ? compat_rawv6_ioctl+0x10/0x10 [ 481.434276][T25456] ? selinux_socket_sendmsg+0x11f/0x340 [ 481.439792][T25456] ? memset+0x1f/0x40 [ 481.443743][T25456] ? inet_send_prepare+0x1b7/0x470 [ 481.448839][T25456] ? inet_send_prepare+0x470/0x470 [ 481.453917][T25456] __sys_sendto+0x4f6/0x6c0 [ 481.458389][T25456] ? __ia32_sys_getpeername+0x80/0x80 [ 481.463730][T25456] ? vfs_write+0x427/0x4f0 [ 481.468148][T25456] ? debug_smp_processor_id+0x20/0x20 [ 481.473489][T25456] ? __ia32_sys_read+0x80/0x80 [ 481.478219][T25456] __x64_sys_sendto+0xda/0xf0 [ 481.482882][T25456] do_syscall_64+0xcb/0x150 [ 481.487368][T25456] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 481.493229][T25456] RIP: 0033:0x45e149 [ 481.497115][T25456] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 481.516775][T25456] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 12:44:03 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x858a, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:03 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580445, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:03 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x4, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:03 executing program 3 (fault-call:1 fault-nth:54): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 481.525172][T25456] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 481.533137][T25456] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 481.541079][T25456] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 481.549021][T25456] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000035 [ 481.556964][T25456] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:03 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x8640, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:03 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x5, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:03 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5804d8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 481.615511][T25474] FAULT_INJECTION: forcing a failure. [ 481.615511][T25474] name failslab, interval 1, probability 0, space 0, times 0 [ 481.652219][T25474] CPU: 0 PID: 25474 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 481.662380][T25474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 481.672425][T25474] Call Trace: [ 481.675709][T25474] dump_stack+0x1dd/0x24e [ 481.680028][T25474] ? devkmsg_release+0x11c/0x11c [ 481.684956][T25474] ? show_regs_print_info+0x12/0x12 [ 481.690143][T25474] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 481.696210][T25474] should_fail+0x6fb/0x860 [ 481.700619][T25474] ? setup_fault_attr+0x3d0/0x3d0 [ 481.705633][T25474] ? __alloc_skb+0x88/0x4d0 [ 481.710127][T25474] should_failslab+0x5/0x20 [ 481.714622][T25474] kmem_cache_alloc+0x36/0x270 [ 481.719376][T25474] __alloc_skb+0x88/0x4d0 [ 481.723694][T25474] ? skb_put+0x114/0x1e0 [ 481.727934][T25474] __ip6_append_data+0x285e/0x3a90 [ 481.733039][T25474] ? __ip6_append_data+0x2231/0x3a90 [ 481.738326][T25474] ? ip6_setup_cork+0x1470/0x1470 [ 481.743337][T25474] ? ip6_append_data+0x2c0/0x2c0 [ 481.748261][T25474] ? lock_sock_nested+0x27a/0x310 [ 481.753271][T25474] ? xfrm_lookup_route+0x5f/0x170 [ 481.758284][T25474] ip6_append_data+0x1ad/0x2c0 [ 481.763044][T25474] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 481.768318][T25474] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 481.773675][T25474] rawv6_sendmsg+0x1b00/0x2cf0 [ 481.778434][T25474] ? compat_rawv6_ioctl+0x10/0x10 [ 481.783451][T25474] ? selinux_socket_sendmsg+0x11f/0x340 [ 481.788988][T25474] ? memset+0x1f/0x40 [ 481.792959][T25474] ? inet_send_prepare+0x1b7/0x470 [ 481.798058][T25474] ? inet_send_prepare+0x470/0x470 [ 481.803156][T25474] __sys_sendto+0x4f6/0x6c0 [ 481.807659][T25474] ? __ia32_sys_getpeername+0x80/0x80 [ 481.813023][T25474] ? vfs_write+0x427/0x4f0 [ 481.817429][T25474] ? debug_smp_processor_id+0x20/0x20 [ 481.822791][T25474] ? __ia32_sys_read+0x80/0x80 [ 481.827543][T25474] __x64_sys_sendto+0xda/0xf0 [ 481.832211][T25474] do_syscall_64+0xcb/0x150 [ 481.836708][T25474] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 481.842586][T25474] RIP: 0033:0x45e149 [ 481.846467][T25474] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 481.866056][T25474] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 481.874455][T25474] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 481.882412][T25474] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 481.890373][T25474] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 481.898329][T25474] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000036 [ 481.906290][T25474] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:04 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x10882, 0x0) connect(r2, &(0x7f0000000080)=@phonet={0x23, 0x1, 0x3f, 0x7}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x200000, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000340)={0x6, 0xf0}) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002100010039bd7000fbdbdf250a0014803f000001100000001400010000000000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000041) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:04 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x883d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x6, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 3 (fault-call:1 fault-nth:55): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580500, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x7, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x88f0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580531, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 482.045449][T25496] FAULT_INJECTION: forcing a failure. [ 482.045449][T25496] name failslab, interval 1, probability 0, space 0, times 0 [ 482.079749][T25496] CPU: 0 PID: 25496 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 482.089921][T25496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.099967][T25496] Call Trace: [ 482.103248][T25496] dump_stack+0x1dd/0x24e [ 482.107569][T25496] ? devkmsg_release+0x11c/0x11c [ 482.112498][T25496] ? show_regs_print_info+0x12/0x12 [ 482.117692][T25496] should_fail+0x6fb/0x860 [ 482.122107][T25496] ? setup_fault_attr+0x3d0/0x3d0 [ 482.127127][T25496] ? __ip6_append_data+0x285e/0x3a90 [ 482.132397][T25496] should_failslab+0x5/0x20 [ 482.136892][T25496] __kmalloc_track_caller+0x5d/0x2c0 [ 482.142165][T25496] ? kmem_cache_alloc+0x1e0/0x270 [ 482.147178][T25496] ? __ip6_append_data+0x285e/0x3a90 [ 482.152553][T25496] __alloc_skb+0xd1/0x4d0 [ 482.156866][T25496] ? skb_put+0x114/0x1e0 [ 482.161094][T25496] __ip6_append_data+0x285e/0x3a90 [ 482.166205][T25496] ? __ip6_append_data+0x2231/0x3a90 [ 482.171484][T25496] ? ip6_setup_cork+0x1470/0x1470 [ 482.176515][T25496] ? ip6_append_data+0x2c0/0x2c0 [ 482.181435][T25496] ? lock_sock_nested+0x27a/0x310 [ 482.186554][T25496] ? xfrm_lookup_route+0x5f/0x170 [ 482.191564][T25496] ip6_append_data+0x1ad/0x2c0 12:44:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x8, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 482.196311][T25496] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 482.201586][T25496] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 482.206858][T25496] rawv6_sendmsg+0x1b00/0x2cf0 [ 482.211611][T25496] ? compat_rawv6_ioctl+0x10/0x10 [ 482.216629][T25496] ? selinux_socket_sendmsg+0x11f/0x340 [ 482.222166][T25496] ? memset+0x1f/0x40 [ 482.226135][T25496] ? inet_send_prepare+0x1b7/0x470 [ 482.231232][T25496] ? inet_send_prepare+0x470/0x470 [ 482.236330][T25496] __sys_sendto+0x4f6/0x6c0 [ 482.240824][T25496] ? __ia32_sys_getpeername+0x80/0x80 12:44:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x9, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 482.246191][T25496] ? vfs_write+0x427/0x4f0 [ 482.250596][T25496] ? debug_smp_processor_id+0x20/0x20 [ 482.255959][T25496] ? __ia32_sys_read+0x80/0x80 [ 482.260711][T25496] __x64_sys_sendto+0xda/0xf0 [ 482.265379][T25496] do_syscall_64+0xcb/0x150 [ 482.269881][T25496] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 482.275766][T25496] RIP: 0033:0x45e149 [ 482.279649][T25496] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 482.299284][T25496] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 482.307792][T25496] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 482.315754][T25496] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 482.323714][T25496] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 482.331675][T25496] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000037 [ 482.339631][T25496] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:04 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580598, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 3 (fault-call:1 fault-nth:56): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x8a85, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f00000001c0), 0xffffff0f) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) read(r3, &(0x7f0000000040)=""/250, 0xfa) [ 482.451198][T25520] FAULT_INJECTION: forcing a failure. [ 482.451198][T25520] name failslab, interval 1, probability 0, space 0, times 0 [ 482.483246][T25520] CPU: 0 PID: 25520 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 12:44:04 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5805c8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x8bd8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 482.493412][T25520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.503452][T25520] Call Trace: [ 482.506734][T25520] dump_stack+0x1dd/0x24e [ 482.511051][T25520] ? devkmsg_release+0x11c/0x11c [ 482.515980][T25520] ? show_regs_print_info+0x12/0x12 [ 482.521250][T25520] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 482.527308][T25520] should_fail+0x6fb/0x860 [ 482.531713][T25520] ? setup_fault_attr+0x3d0/0x3d0 [ 482.536726][T25520] ? __alloc_skb+0x88/0x4d0 [ 482.541213][T25520] should_failslab+0x5/0x20 [ 482.545806][T25520] kmem_cache_alloc+0x36/0x270 12:44:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 482.550560][T25520] __alloc_skb+0x88/0x4d0 [ 482.554874][T25520] ? skb_put+0x114/0x1e0 [ 482.559107][T25520] __ip6_append_data+0x285e/0x3a90 [ 482.564216][T25520] ? __ip6_append_data+0x2231/0x3a90 [ 482.569492][T25520] ? ip6_setup_cork+0x1470/0x1470 [ 482.574501][T25520] ? ip6_append_data+0x2c0/0x2c0 [ 482.579421][T25520] ? lock_sock_nested+0x27a/0x310 [ 482.584429][T25520] ? xfrm_lookup_route+0x5f/0x170 [ 482.589439][T25520] ip6_append_data+0x1ad/0x2c0 [ 482.594190][T25520] ? rawv6_send_hdrinc+0x11b0/0x11b0 12:44:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 482.599461][T25520] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 482.604829][T25520] rawv6_sendmsg+0x1b00/0x2cf0 [ 482.609585][T25520] ? compat_rawv6_ioctl+0x10/0x10 [ 482.614601][T25520] ? selinux_socket_sendmsg+0x11f/0x340 [ 482.620152][T25520] ? memset+0x1f/0x40 [ 482.624124][T25520] ? inet_send_prepare+0x1b7/0x470 [ 482.629224][T25520] ? inet_send_prepare+0x470/0x470 [ 482.634359][T25520] __sys_sendto+0x4f6/0x6c0 [ 482.638852][T25520] ? __ia32_sys_getpeername+0x80/0x80 [ 482.644221][T25520] ? vfs_write+0x427/0x4f0 [ 482.648628][T25520] ? debug_smp_processor_id+0x20/0x20 [ 482.653988][T25520] ? __ia32_sys_read+0x80/0x80 [ 482.658737][T25520] __x64_sys_sendto+0xda/0xf0 [ 482.663403][T25520] do_syscall_64+0xcb/0x150 [ 482.667899][T25520] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 482.673775][T25520] RIP: 0033:0x45e149 [ 482.677654][T25520] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 482.697241][T25520] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 482.705638][T25520] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 482.713598][T25520] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 482.721556][T25520] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 482.729513][T25520] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000038 [ 482.737729][T25520] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:04 executing program 3 (fault-call:1 fault-nth:57): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x8d6e, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5805e4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:04 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580600, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 482.822948][T25543] FAULT_INJECTION: forcing a failure. [ 482.822948][T25543] name failslab, interval 1, probability 0, space 0, times 0 [ 482.876156][T25543] CPU: 1 PID: 25543 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 482.886321][T25543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 482.896365][T25543] Call Trace: [ 482.899657][T25543] dump_stack+0x1dd/0x24e [ 482.903976][T25543] ? devkmsg_release+0x11c/0x11c [ 482.908903][T25543] ? show_regs_print_info+0x12/0x12 [ 482.914086][T25543] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 482.920144][T25543] should_fail+0x6fb/0x860 [ 482.924550][T25543] ? setup_fault_attr+0x3d0/0x3d0 [ 482.929563][T25543] ? __alloc_skb+0x88/0x4d0 [ 482.934050][T25543] should_failslab+0x5/0x20 [ 482.938545][T25543] kmem_cache_alloc+0x36/0x270 [ 482.943296][T25543] __alloc_skb+0x88/0x4d0 [ 482.947617][T25543] ? skb_put+0x114/0x1e0 [ 482.951854][T25543] __ip6_append_data+0x285e/0x3a90 [ 482.956980][T25543] ? __ip6_append_data+0x2231/0x3a90 [ 482.962256][T25543] ? ip6_setup_cork+0x1470/0x1470 [ 482.967266][T25543] ? ip6_append_data+0x2c0/0x2c0 [ 482.972190][T25543] ? lock_sock_nested+0x27a/0x310 [ 482.977198][T25543] ? xfrm_lookup_route+0x5f/0x170 [ 482.982208][T25543] ip6_append_data+0x1ad/0x2c0 [ 482.986955][T25543] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 482.992225][T25543] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 482.997495][T25543] rawv6_sendmsg+0x1b00/0x2cf0 [ 483.002250][T25543] ? compat_rawv6_ioctl+0x10/0x10 [ 483.007264][T25543] ? selinux_socket_sendmsg+0x11f/0x340 [ 483.012899][T25543] ? memset+0x1f/0x40 [ 483.016870][T25543] ? inet_send_prepare+0x1b7/0x470 [ 483.021970][T25543] ? inet_send_prepare+0x470/0x470 [ 483.027066][T25543] __sys_sendto+0x4f6/0x6c0 [ 483.031558][T25543] ? __ia32_sys_getpeername+0x80/0x80 [ 483.037037][T25543] ? vfs_write+0x427/0x4f0 [ 483.041445][T25543] ? debug_smp_processor_id+0x20/0x20 [ 483.046803][T25543] ? __ia32_sys_read+0x80/0x80 [ 483.051551][T25543] __x64_sys_sendto+0xda/0xf0 [ 483.056214][T25543] do_syscall_64+0xcb/0x150 [ 483.060707][T25543] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 483.066585][T25543] RIP: 0033:0x45e149 [ 483.070472][T25543] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 483.090064][T25543] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 483.098462][T25543] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 483.106419][T25543] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 483.114378][T25543] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 483.122340][T25543] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000039 [ 483.130300][T25543] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:05 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x101040, 0x0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xac, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xce}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff000}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb6d7}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x80d1}, 0x4040000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syncfs(0xffffffffffffffff) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x800, 0x20, 0x1, 0xffffffffffffffff}) close(r4) r5 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r2, &(0x7f00000001c0), 0xffffff0f) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:05 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x901d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580700, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 3 (fault-call:1 fault-nth:58): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580897, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9021, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580900, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 483.275543][T25562] FAULT_INJECTION: forcing a failure. [ 483.275543][T25562] name failslab, interval 1, probability 0, space 0, times 0 12:44:05 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5809dd, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 483.347223][T25562] CPU: 1 PID: 25562 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 483.357390][T25562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.367439][T25562] Call Trace: [ 483.370726][T25562] dump_stack+0x1dd/0x24e [ 483.375048][T25562] ? devkmsg_release+0x11c/0x11c [ 483.379985][T25562] ? show_regs_print_info+0x12/0x12 [ 483.385180][T25562] should_fail+0x6fb/0x860 [ 483.389584][T25562] ? setup_fault_attr+0x3d0/0x3d0 12:44:05 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580a00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 483.394626][T25562] ? __ip6_append_data+0x285e/0x3a90 [ 483.399904][T25562] should_failslab+0x5/0x20 [ 483.404391][T25562] __kmalloc_track_caller+0x5d/0x2c0 [ 483.409664][T25562] ? kmem_cache_alloc+0x1e0/0x270 [ 483.414679][T25562] ? __ip6_append_data+0x285e/0x3a90 [ 483.419956][T25562] __alloc_skb+0xd1/0x4d0 [ 483.424276][T25562] ? skb_put+0x114/0x1e0 [ 483.428512][T25562] __ip6_append_data+0x285e/0x3a90 [ 483.433618][T25562] ? __ip6_append_data+0x2231/0x3a90 [ 483.438896][T25562] ? ip6_setup_cork+0x1470/0x1470 [ 483.443906][T25562] ? ip6_append_data+0x2c0/0x2c0 [ 483.448827][T25562] ? lock_sock_nested+0x27a/0x310 [ 483.453840][T25562] ? xfrm_lookup_route+0x5f/0x170 [ 483.458971][T25562] ip6_append_data+0x1ad/0x2c0 [ 483.463723][T25562] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 483.468999][T25562] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 483.474282][T25562] rawv6_sendmsg+0x1b00/0x2cf0 [ 483.479037][T25562] ? compat_rawv6_ioctl+0x10/0x10 [ 483.484053][T25562] ? selinux_socket_sendmsg+0x11f/0x340 [ 483.489589][T25562] ? memset+0x1f/0x40 [ 483.493566][T25562] ? inet_send_prepare+0x1b7/0x470 [ 483.498664][T25562] ? inet_send_prepare+0x470/0x470 [ 483.503766][T25562] __sys_sendto+0x4f6/0x6c0 [ 483.508260][T25562] ? __ia32_sys_getpeername+0x80/0x80 [ 483.513623][T25562] ? vfs_write+0x427/0x4f0 [ 483.518032][T25562] ? debug_smp_processor_id+0x20/0x20 [ 483.523397][T25562] ? __ia32_sys_read+0x80/0x80 [ 483.528148][T25562] __x64_sys_sendto+0xda/0xf0 [ 483.532814][T25562] do_syscall_64+0xcb/0x150 [ 483.537310][T25562] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 483.543187][T25562] RIP: 0033:0x45e149 [ 483.547068][T25562] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 483.566660][T25562] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 483.575067][T25562] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 483.583501][T25562] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 483.591469][T25562] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 483.599429][T25562] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000003a [ 483.607397][T25562] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:05 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='\\${,-\\]\x00', &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x18000, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x43}, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x0, 0x3}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) recvmmsg(r4, &(0x7f0000001b80)=[{{&(0x7f0000000100)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/110, 0x6e}, {&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000540)=""/158, 0x9e}, {&(0x7f0000000600)=""/80, 0x50}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000680)=""/195, 0xc3}, {&(0x7f0000000780)=""/99, 0x63}, {&(0x7f0000000800)=""/52, 0x34}, {&(0x7f0000000840)=""/150, 0x96}], 0x9}, 0x6}, {{&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000a40)=""/4096, 0x1000}], 0x1, &(0x7f0000001a80)=""/196, 0xc4}, 0x7}], 0x2, 0x2013, &(0x7f0000001c00)={0x0, 0x989680}) write(r4, &(0x7f0000000300)="ab28869c43176f5f178c1278c8271d8875f6d53f61ec61ba1aad09b2ee92efeec59bb76ee34b90f9c58b7d3fbdb3e2e4ccf82a6fbb543d8c866dbddc118f797716701ecf67e9dc65c68cacf356b8f4b7767a3808b82a76e52192cbfc53721a0c238f20bdfae0989c4fac8922e7495004fbc6d1d0affdca4d3be305f8aea82f147ef7261b1dbd6f131ff43ce80411d4254a0d79e04f568300165a8710678de627c344188e0450f66bbf6c", 0xaa) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:05 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580b30, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x90d4, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 3 (fault-call:1 fault-nth:59): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9170, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580d15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580dc8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 483.791084][T25594] FAULT_INJECTION: forcing a failure. [ 483.791084][T25594] name failslab, interval 1, probability 0, space 0, times 0 12:44:05 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9552, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:05 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580f00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 483.831879][T25594] CPU: 1 PID: 25594 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 483.842041][T25594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.852196][T25594] Call Trace: [ 483.855492][T25594] dump_stack+0x1dd/0x24e [ 483.859812][T25594] ? devkmsg_release+0x11c/0x11c [ 483.864742][T25594] ? show_regs_print_info+0x12/0x12 [ 483.869931][T25594] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 483.875991][T25594] should_fail+0x6fb/0x860 12:44:05 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580f75, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 483.880399][T25594] ? setup_fault_attr+0x3d0/0x3d0 [ 483.885416][T25594] ? __alloc_skb+0x88/0x4d0 [ 483.889915][T25594] should_failslab+0x5/0x20 [ 483.894409][T25594] kmem_cache_alloc+0x36/0x270 [ 483.899169][T25594] __alloc_skb+0x88/0x4d0 [ 483.903489][T25594] ? skb_put+0x114/0x1e0 [ 483.907724][T25594] __ip6_append_data+0x285e/0x3a90 [ 483.912828][T25594] ? __ip6_append_data+0x2231/0x3a90 [ 483.918106][T25594] ? ip6_setup_cork+0x1470/0x1470 [ 483.923132][T25594] ? ip6_append_data+0x2c0/0x2c0 [ 483.928056][T25594] ? lock_sock_nested+0x27a/0x310 [ 483.933067][T25594] ? xfrm_lookup_route+0x5f/0x170 [ 483.938078][T25594] ip6_append_data+0x1ad/0x2c0 [ 483.942830][T25594] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 483.948107][T25594] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 483.953382][T25594] rawv6_sendmsg+0x1b00/0x2cf0 [ 483.958142][T25594] ? compat_rawv6_ioctl+0x10/0x10 [ 483.963158][T25594] ? selinux_socket_sendmsg+0x11f/0x340 [ 483.968696][T25594] ? memset+0x1f/0x40 [ 483.972678][T25594] ? inet_send_prepare+0x1b7/0x470 [ 483.977781][T25594] ? inet_send_prepare+0x470/0x470 [ 483.982883][T25594] __sys_sendto+0x4f6/0x6c0 [ 483.987376][T25594] ? __ia32_sys_getpeername+0x80/0x80 [ 483.992744][T25594] ? vfs_write+0x427/0x4f0 [ 483.997155][T25594] ? debug_smp_processor_id+0x20/0x20 [ 484.002519][T25594] ? __ia32_sys_read+0x80/0x80 [ 484.007276][T25594] __x64_sys_sendto+0xda/0xf0 [ 484.011957][T25594] do_syscall_64+0xcb/0x150 [ 484.016452][T25594] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 484.022331][T25594] RIP: 0033:0x45e149 [ 484.026211][T25594] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 484.045919][T25594] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 484.054322][T25594] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 484.062282][T25594] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 484.070243][T25594] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 484.078206][T25594] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000003b [ 484.086167][T25594] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:06 executing program 2: socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x402, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) 12:44:06 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x10, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:06 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58107b, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:06 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x95b5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:06 executing program 3 (fault-call:1 fault-nth:60): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:06 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9708, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:06 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5810c8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:06 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x11, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 484.725199][T25624] FAULT_INJECTION: forcing a failure. [ 484.725199][T25624] name failslab, interval 1, probability 0, space 0, times 0 [ 484.757859][T25624] CPU: 1 PID: 25624 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 484.768030][T25624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.778166][T25624] Call Trace: [ 484.778186][T25624] dump_stack+0x1dd/0x24e [ 484.778196][T25624] ? devkmsg_release+0x11c/0x11c [ 484.778210][T25624] ? show_regs_print_info+0x12/0x12 [ 484.795886][T25624] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 484.801943][T25624] should_fail+0x6fb/0x860 [ 484.806353][T25624] ? setup_fault_attr+0x3d0/0x3d0 [ 484.811486][T25624] ? __alloc_skb+0x88/0x4d0 [ 484.815979][T25624] should_failslab+0x5/0x20 [ 484.820476][T25624] kmem_cache_alloc+0x36/0x270 [ 484.825226][T25624] __alloc_skb+0x88/0x4d0 [ 484.829538][T25624] ? skb_put+0x114/0x1e0 [ 484.833769][T25624] __ip6_append_data+0x285e/0x3a90 [ 484.838880][T25624] ? __ip6_append_data+0x2231/0x3a90 [ 484.844154][T25624] ? ip6_setup_cork+0x1470/0x1470 [ 484.849165][T25624] ? ip6_append_data+0x2c0/0x2c0 [ 484.854086][T25624] ? lock_sock_nested+0x27a/0x310 [ 484.859093][T25624] ? xfrm_lookup_route+0x5f/0x170 [ 484.864104][T25624] ip6_append_data+0x1ad/0x2c0 [ 484.868862][T25624] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 484.874140][T25624] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 484.879443][T25624] rawv6_sendmsg+0x1b00/0x2cf0 [ 484.884201][T25624] ? compat_rawv6_ioctl+0x10/0x10 [ 484.889221][T25624] ? selinux_socket_sendmsg+0x11f/0x340 [ 484.894756][T25624] ? memset+0x1f/0x40 [ 484.898723][T25624] ? inet_send_prepare+0x1b7/0x470 [ 484.903820][T25624] ? inet_send_prepare+0x470/0x470 [ 484.908953][T25624] __sys_sendto+0x4f6/0x6c0 [ 484.913447][T25624] ? __ia32_sys_getpeername+0x80/0x80 [ 484.918807][T25624] ? vfs_write+0x427/0x4f0 [ 484.923210][T25624] ? debug_smp_processor_id+0x20/0x20 [ 484.928569][T25624] ? __ia32_sys_read+0x80/0x80 [ 484.933320][T25624] __x64_sys_sendto+0xda/0xf0 [ 484.938093][T25624] do_syscall_64+0xcb/0x150 [ 484.942603][T25624] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 484.949129][T25624] RIP: 0033:0x45e149 [ 484.953011][T25624] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 12:44:07 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d581100, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:07 executing program 3 (fault-call:1 fault-nth:61): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 484.972604][T25624] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 484.981006][T25624] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 484.988963][T25624] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 484.996922][T25624] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 485.004879][T25624] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000003c [ 485.012837][T25624] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:07 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9805, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:07 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x21, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 485.061584][T25639] FAULT_INJECTION: forcing a failure. [ 485.061584][T25639] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 485.093575][T25639] CPU: 0 PID: 25639 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 485.103739][T25639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.113781][T25639] Call Trace: [ 485.117071][T25639] dump_stack+0x1dd/0x24e [ 485.121392][T25639] ? devkmsg_release+0x11c/0x11c [ 485.126322][T25639] ? show_regs_print_info+0x12/0x12 [ 485.131512][T25639] should_fail+0x6fb/0x860 [ 485.135920][T25639] ? setup_fault_attr+0x3d0/0x3d0 [ 485.140936][T25639] __alloc_pages_nodemask+0x1ee/0x7c0 [ 485.146296][T25639] ? __kasan_kmalloc+0x129/0x1c0 [ 485.151221][T25639] ? rawv6_sendmsg+0x1b00/0x2cf0 [ 485.156153][T25639] ? __sys_sendto+0x4f6/0x6c0 [ 485.161424][T25639] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 485.166958][T25639] alloc_slab_page+0x3d/0x3f0 [ 485.171622][T25639] new_slab+0x97/0x450 [ 485.175678][T25639] ? check_preemption_disabled+0x15a/0x330 [ 485.181468][T25639] ___slab_alloc+0x2e0/0x450 [ 485.186048][T25639] ? __ip6_append_data+0x285e/0x3a90 [ 485.191318][T25639] ? __ip6_append_data+0x285e/0x3a90 [ 485.196590][T25639] __kmalloc_track_caller+0x29d/0x2c0 [ 485.201949][T25639] ? __ip6_append_data+0x285e/0x3a90 [ 485.207221][T25639] __alloc_skb+0xd1/0x4d0 [ 485.211536][T25639] ? skb_put+0x114/0x1e0 [ 485.215774][T25639] __ip6_append_data+0x285e/0x3a90 [ 485.220874][T25639] ? __ip6_append_data+0x2231/0x3a90 [ 485.226148][T25639] ? ip6_setup_cork+0x1470/0x1470 [ 485.231175][T25639] ? ip6_append_data+0x2c0/0x2c0 [ 485.236098][T25639] ? lock_sock_nested+0x27a/0x310 [ 485.241111][T25639] ? xfrm_lookup_route+0x5f/0x170 [ 485.246125][T25639] ip6_append_data+0x1ad/0x2c0 [ 485.250875][T25639] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 485.256145][T25639] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 485.261416][T25639] rawv6_sendmsg+0x1b00/0x2cf0 [ 485.266171][T25639] ? compat_rawv6_ioctl+0x10/0x10 [ 485.271184][T25639] ? selinux_socket_sendmsg+0x11f/0x340 [ 485.276719][T25639] ? memset+0x1f/0x40 [ 485.280689][T25639] ? inet_send_prepare+0x1b7/0x470 [ 485.285786][T25639] ? inet_send_prepare+0x470/0x470 [ 485.290885][T25639] __sys_sendto+0x4f6/0x6c0 [ 485.295376][T25639] ? __ia32_sys_getpeername+0x80/0x80 [ 485.300740][T25639] ? vfs_write+0x427/0x4f0 [ 485.305145][T25639] ? debug_smp_processor_id+0x20/0x20 [ 485.310505][T25639] ? __ia32_sys_read+0x80/0x80 [ 485.315254][T25639] __x64_sys_sendto+0xda/0xf0 [ 485.319920][T25639] do_syscall_64+0xcb/0x150 [ 485.324412][T25639] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.330286][T25639] RIP: 0033:0x45e149 [ 485.334164][T25639] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 485.353754][T25639] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 485.362156][T25639] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 485.370116][T25639] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 485.378076][T25639] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 485.386036][T25639] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000003d [ 485.393993][T25639] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:07 executing program 3 (fault-call:1 fault-nth:62): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:07 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x98b8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:07 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58150d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:07 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:07 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9b4d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:07 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2c, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:07 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5815ac, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:07 executing program 2: ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/88}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000006c0)='highspeed\x00', 0xa) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) r5 = syz_genetlink_get_family_id$netlbl_calipso(0x0) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYBLOB="54841a85ade1183fc34903d2976d3b15bd4e2910e0dbc8358702b42decb2892a6f0c0d4974985e42af7623792f2f", @ANYRESDEC=r5, @ANYRESDEC, @ANYRESOCT, @ANYRES64], 0x100000530) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="5400000087524c9e59bfe38fea09a34a1bf3ad68e74428b01aaa1d2361b07159c30d820c72a6834af31c0024895532c8087fef40dbba5fc108ef68060788c2cfdf78ce68579b5e59cd91d678f162506e1f6691955ac845890176643ecf646249c208f0ff96f3da01df3d", @ANYRES16=r5, @ANYBLOB="00032bbd7000fedbdf2501000000080001000000000008000100020000000800020002000000080002000200000008000200020000000800010003000000084c0c6c190000000800020002000000"], 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x40001) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r6 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 485.552944][T25654] FAULT_INJECTION: forcing a failure. [ 485.552944][T25654] name failslab, interval 1, probability 0, space 0, times 0 [ 485.608710][T25654] CPU: 0 PID: 25654 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 485.618877][T25654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.628927][T25654] Call Trace: [ 485.632216][T25654] dump_stack+0x1dd/0x24e [ 485.636539][T25654] ? devkmsg_release+0x11c/0x11c [ 485.641464][T25654] ? show_regs_print_info+0x12/0x12 [ 485.646660][T25654] should_fail+0x6fb/0x860 [ 485.651076][T25654] ? setup_fault_attr+0x3d0/0x3d0 [ 485.656092][T25654] ? __ip6_append_data+0x285e/0x3a90 [ 485.661361][T25654] should_failslab+0x5/0x20 [ 485.665856][T25654] __kmalloc_track_caller+0x5d/0x2c0 [ 485.671128][T25654] ? kmem_cache_alloc+0x1e0/0x270 [ 485.676141][T25654] ? __ip6_append_data+0x285e/0x3a90 [ 485.681413][T25654] __alloc_skb+0xd1/0x4d0 [ 485.685731][T25654] ? skb_put+0x114/0x1e0 [ 485.689969][T25654] __ip6_append_data+0x285e/0x3a90 [ 485.695072][T25654] ? __ip6_append_data+0x2231/0x3a90 [ 485.700346][T25654] ? ip6_setup_cork+0x1470/0x1470 [ 485.705358][T25654] ? ip6_append_data+0x2c0/0x2c0 [ 485.710277][T25654] ? lock_sock_nested+0x27a/0x310 [ 485.715282][T25654] ? xfrm_lookup_route+0x5f/0x170 [ 485.720291][T25654] ip6_append_data+0x1ad/0x2c0 [ 485.725043][T25654] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 485.730317][T25654] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 485.735584][T25654] rawv6_sendmsg+0x1b00/0x2cf0 [ 485.740339][T25654] ? compat_rawv6_ioctl+0x10/0x10 [ 485.745350][T25654] ? selinux_socket_sendmsg+0x11f/0x340 [ 485.750886][T25654] ? memset+0x1f/0x40 [ 485.754853][T25654] ? inet_send_prepare+0x1b7/0x470 [ 485.759973][T25654] ? inet_send_prepare+0x470/0x470 [ 485.765094][T25654] __sys_sendto+0x4f6/0x6c0 [ 485.769587][T25654] ? __ia32_sys_getpeername+0x80/0x80 [ 485.774947][T25654] ? vfs_write+0x427/0x4f0 [ 485.779354][T25654] ? debug_smp_processor_id+0x20/0x20 [ 485.784717][T25654] ? __ia32_sys_read+0x80/0x80 [ 485.789475][T25654] __x64_sys_sendto+0xda/0xf0 [ 485.794141][T25654] do_syscall_64+0xcb/0x150 [ 485.798634][T25654] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 485.804516][T25654] RIP: 0033:0x45e149 [ 485.808398][T25654] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 485.827988][T25654] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 485.836392][T25654] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 485.844356][T25654] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 12:44:07 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9ca0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:07 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d581660, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:07 executing program 3 (fault-call:1 fault-nth:63): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 485.852314][T25654] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 485.860271][T25654] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000003e [ 485.868227][T25654] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:07 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9d36, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:07 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3a, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:08 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58185f, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 485.932734][T25674] FAULT_INJECTION: forcing a failure. [ 485.932734][T25674] name failslab, interval 1, probability 0, space 0, times 0 [ 485.949205][T25674] CPU: 1 PID: 25674 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 485.959355][T25674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.969394][T25674] Call Trace: [ 485.972675][T25674] dump_stack+0x1dd/0x24e [ 485.977001][T25674] ? devkmsg_release+0x11c/0x11c [ 485.981945][T25674] ? show_regs_print_info+0x12/0x12 [ 485.987134][T25674] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 485.993192][T25674] should_fail+0x6fb/0x860 [ 485.997603][T25674] ? setup_fault_attr+0x3d0/0x3d0 [ 486.002616][T25674] ? __alloc_skb+0x88/0x4d0 [ 486.007106][T25674] should_failslab+0x5/0x20 [ 486.011596][T25674] kmem_cache_alloc+0x36/0x270 [ 486.016462][T25674] __alloc_skb+0x88/0x4d0 [ 486.020776][T25674] ? skb_put+0x114/0x1e0 [ 486.025010][T25674] __ip6_append_data+0x285e/0x3a90 [ 486.030113][T25674] ? __ip6_append_data+0x2231/0x3a90 [ 486.035389][T25674] ? ip6_setup_cork+0x1470/0x1470 [ 486.040401][T25674] ? ip6_append_data+0x2c0/0x2c0 [ 486.045320][T25674] ? lock_sock_nested+0x27a/0x310 [ 486.050330][T25674] ? xfrm_lookup_route+0x5f/0x170 [ 486.055338][T25674] ip6_append_data+0x1ad/0x2c0 [ 486.060085][T25674] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 486.065355][T25674] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 486.070625][T25674] rawv6_sendmsg+0x1b00/0x2cf0 [ 486.075381][T25674] ? compat_rawv6_ioctl+0x10/0x10 [ 486.080391][T25674] ? selinux_socket_sendmsg+0x11f/0x340 [ 486.085924][T25674] ? memset+0x1f/0x40 [ 486.089894][T25674] ? inet_send_prepare+0x1b7/0x470 [ 486.094994][T25674] ? inet_send_prepare+0x470/0x470 [ 486.100091][T25674] __sys_sendto+0x4f6/0x6c0 [ 486.104583][T25674] ? __ia32_sys_getpeername+0x80/0x80 [ 486.109954][T25674] ? vfs_write+0x427/0x4f0 [ 486.114359][T25674] ? debug_smp_processor_id+0x20/0x20 [ 486.119839][T25674] ? __ia32_sys_read+0x80/0x80 [ 486.124595][T25674] __x64_sys_sendto+0xda/0xf0 [ 486.129261][T25674] do_syscall_64+0xcb/0x150 [ 486.133755][T25674] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 486.139634][T25674] RIP: 0033:0x45e149 [ 486.143513][T25674] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 486.163100][T25674] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 486.171497][T25674] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 486.179457][T25674] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 486.187414][T25674] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 486.195455][T25674] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000003f [ 486.203410][T25674] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:08 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3c, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:08 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9de9, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:08 executing program 3 (fault-call:1 fault-nth:64): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:08 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d581aa5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:08 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x60, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 486.362870][T25694] FAULT_INJECTION: forcing a failure. [ 486.362870][T25694] name failslab, interval 1, probability 0, space 0, times 0 [ 486.391783][T25694] CPU: 1 PID: 25694 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 486.401945][T25694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.411987][T25694] Call Trace: [ 486.415274][T25694] dump_stack+0x1dd/0x24e [ 486.419594][T25694] ? devkmsg_release+0x11c/0x11c [ 486.424523][T25694] ? show_regs_print_info+0x12/0x12 [ 486.429709][T25694] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 486.435772][T25694] should_fail+0x6fb/0x860 [ 486.440185][T25694] ? setup_fault_attr+0x3d0/0x3d0 [ 486.445293][T25694] ? __alloc_skb+0x88/0x4d0 [ 486.449790][T25694] should_failslab+0x5/0x20 [ 486.454286][T25694] kmem_cache_alloc+0x36/0x270 [ 486.459043][T25694] __alloc_skb+0x88/0x4d0 [ 486.463463][T25694] ? skb_put+0x114/0x1e0 [ 486.467700][T25694] __ip6_append_data+0x285e/0x3a90 [ 486.472803][T25694] ? __ip6_append_data+0x2231/0x3a90 [ 486.478078][T25694] ? ip6_setup_cork+0x1470/0x1470 [ 486.483087][T25694] ? ip6_append_data+0x2c0/0x2c0 [ 486.488013][T25694] ? lock_sock_nested+0x27a/0x310 [ 486.493022][T25694] ? xfrm_lookup_route+0x5f/0x170 [ 486.498033][T25694] ip6_append_data+0x1ad/0x2c0 [ 486.502783][T25694] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 486.508052][T25694] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 486.513323][T25694] rawv6_sendmsg+0x1b00/0x2cf0 [ 486.518078][T25694] ? compat_rawv6_ioctl+0x10/0x10 [ 486.523094][T25694] ? selinux_socket_sendmsg+0x11f/0x340 [ 486.528631][T25694] ? memset+0x1f/0x40 [ 486.532599][T25694] ? inet_send_prepare+0x1b7/0x470 [ 486.537699][T25694] ? inet_send_prepare+0x470/0x470 [ 486.542792][T25694] __sys_sendto+0x4f6/0x6c0 [ 486.547285][T25694] ? __ia32_sys_getpeername+0x80/0x80 [ 486.552648][T25694] ? vfs_write+0x427/0x4f0 [ 486.557056][T25694] ? debug_smp_processor_id+0x20/0x20 [ 486.562428][T25694] ? __ia32_sys_read+0x80/0x80 [ 486.567180][T25694] __x64_sys_sendto+0xda/0xf0 [ 486.571844][T25694] do_syscall_64+0xcb/0x150 [ 486.576350][T25694] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 486.582241][T25694] RIP: 0033:0x45e149 [ 486.586123][T25694] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 486.605712][T25694] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 486.614114][T25694] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 486.622073][T25694] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 486.630030][T25694] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 486.637984][T25694] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000040 [ 486.645940][T25694] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:08 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f0000000140)="cf63dea24833fdec8a4176593706a6bc226a0991b1ce6583989806324585820dbb46fedf83586f31774f69df0ae40ae396abb270794833d70f", 0x39) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept(r3, &(0x7f0000000040)=@isdn, &(0x7f00000000c0)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000100)={@empty, 0x5d}) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:08 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa09c, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:08 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d581bf8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:08 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x64, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:08 executing program 3 (fault-call:1 fault-nth:65): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:08 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x78, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:08 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d581d90, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:08 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa0e5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:08 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb3, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:08 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d582002, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 486.773416][T25706] FAULT_INJECTION: forcing a failure. [ 486.773416][T25706] name failslab, interval 1, probability 0, space 0, times 0 [ 486.840492][T25706] CPU: 0 PID: 25706 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 486.850654][T25706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.860700][T25706] Call Trace: [ 486.863984][T25706] dump_stack+0x1dd/0x24e [ 486.868303][T25706] ? devkmsg_release+0x11c/0x11c [ 486.873236][T25706] ? show_regs_print_info+0x12/0x12 [ 486.878435][T25706] should_fail+0x6fb/0x860 [ 486.882861][T25706] ? setup_fault_attr+0x3d0/0x3d0 [ 486.887870][T25706] ? __ip6_append_data+0x285e/0x3a90 [ 486.893141][T25706] should_failslab+0x5/0x20 [ 486.897630][T25706] __kmalloc_track_caller+0x5d/0x2c0 [ 486.902901][T25706] ? kmem_cache_alloc+0x1e0/0x270 [ 486.907915][T25706] ? __ip6_append_data+0x285e/0x3a90 [ 486.913189][T25706] __alloc_skb+0xd1/0x4d0 [ 486.917505][T25706] ? skb_put+0x114/0x1e0 [ 486.921735][T25706] __ip6_append_data+0x285e/0x3a90 [ 486.926836][T25706] ? __ip6_append_data+0x2231/0x3a90 [ 486.932113][T25706] ? ip6_setup_cork+0x1470/0x1470 [ 486.937132][T25706] ? ip6_append_data+0x2c0/0x2c0 [ 486.942054][T25706] ? lock_sock_nested+0x27a/0x310 [ 486.947062][T25706] ? xfrm_lookup_route+0x5f/0x170 [ 486.952075][T25706] ip6_append_data+0x1ad/0x2c0 [ 486.956841][T25706] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 486.962114][T25706] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 486.967389][T25706] rawv6_sendmsg+0x1b00/0x2cf0 [ 486.972145][T25706] ? compat_rawv6_ioctl+0x10/0x10 [ 486.977265][T25706] ? selinux_socket_sendmsg+0x11f/0x340 [ 486.982798][T25706] ? memset+0x1f/0x40 [ 486.986767][T25706] ? inet_send_prepare+0x1b7/0x470 [ 486.991867][T25706] ? inet_send_prepare+0x470/0x470 [ 486.996962][T25706] __sys_sendto+0x4f6/0x6c0 [ 487.001450][T25706] ? __ia32_sys_getpeername+0x80/0x80 [ 487.006808][T25706] ? vfs_write+0x427/0x4f0 [ 487.011211][T25706] ? debug_smp_processor_id+0x20/0x20 [ 487.016567][T25706] ? __ia32_sys_read+0x80/0x80 [ 487.021317][T25706] __x64_sys_sendto+0xda/0xf0 [ 487.025981][T25706] do_syscall_64+0xcb/0x150 [ 487.030477][T25706] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 487.036382][T25706] RIP: 0033:0x45e149 [ 487.040263][T25706] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 487.059851][T25706] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 487.068245][T25706] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 487.076202][T25706] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 12:44:09 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa238, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:09 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58203d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 487.084160][T25706] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 487.092126][T25706] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000041 [ 487.100081][T25706] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:09 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000100)) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x78) fcntl$dupfd(r0, 0x0, r0) r4 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) close(r5) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:09 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xfc, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:09 executing program 3 (fault-call:1 fault-nth:66): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:09 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa51a, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:09 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d582043, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:09 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5820f6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 487.303258][T25735] FAULT_INJECTION: forcing a failure. [ 487.303258][T25735] name failslab, interval 1, probability 0, space 0, times 0 [ 487.330121][T25735] CPU: 0 PID: 25735 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 487.340283][T25735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.350847][T25735] Call Trace: [ 487.354168][T25735] dump_stack+0x1dd/0x24e [ 487.358489][T25735] ? devkmsg_release+0x11c/0x11c [ 487.363422][T25735] ? show_regs_print_info+0x12/0x12 [ 487.368609][T25735] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 487.374665][T25735] should_fail+0x6fb/0x860 [ 487.379077][T25735] ? setup_fault_attr+0x3d0/0x3d0 [ 487.384100][T25735] ? __alloc_skb+0x88/0x4d0 [ 487.388594][T25735] should_failslab+0x5/0x20 [ 487.393084][T25735] kmem_cache_alloc+0x36/0x270 [ 487.397839][T25735] __alloc_skb+0x88/0x4d0 [ 487.402156][T25735] ? skb_put+0x114/0x1e0 [ 487.406389][T25735] __ip6_append_data+0x285e/0x3a90 [ 487.411491][T25735] ? __ip6_append_data+0x2231/0x3a90 [ 487.416766][T25735] ? ip6_setup_cork+0x1470/0x1470 [ 487.421777][T25735] ? ip6_append_data+0x2c0/0x2c0 [ 487.426699][T25735] ? lock_sock_nested+0x27a/0x310 [ 487.431706][T25735] ? xfrm_lookup_route+0x5f/0x170 [ 487.436718][T25735] ip6_append_data+0x1ad/0x2c0 [ 487.441469][T25735] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 487.446744][T25735] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 487.452015][T25735] rawv6_sendmsg+0x1b00/0x2cf0 [ 487.456771][T25735] ? compat_rawv6_ioctl+0x10/0x10 [ 487.461787][T25735] ? selinux_socket_sendmsg+0x11f/0x340 [ 487.467321][T25735] ? memset+0x1f/0x40 [ 487.471293][T25735] ? inet_send_prepare+0x1b7/0x470 [ 487.476390][T25735] ? inet_send_prepare+0x470/0x470 [ 487.481491][T25735] __sys_sendto+0x4f6/0x6c0 [ 487.485985][T25735] ? __ia32_sys_getpeername+0x80/0x80 [ 487.491347][T25735] ? vfs_write+0x427/0x4f0 [ 487.495753][T25735] ? debug_smp_processor_id+0x20/0x20 [ 487.501112][T25735] ? __ia32_sys_read+0x80/0x80 [ 487.505863][T25735] __x64_sys_sendto+0xda/0xf0 [ 487.510528][T25735] do_syscall_64+0xcb/0x150 [ 487.515020][T25735] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 487.520894][T25735] RIP: 0033:0x45e149 [ 487.524773][T25735] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 487.544366][T25735] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 12:44:09 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa5cd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:09 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x103, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:09 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d582100, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:09 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x1f4, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:09 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x220, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:09 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x300, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 487.552766][T25735] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 487.560723][T25735] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 487.568690][T25735] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 487.576645][T25735] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000042 [ 487.584603][T25735] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:10 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x301, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:10 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa67d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:10 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d582190, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:10 executing program 3 (fault-call:1 fault-nth:67): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:10 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055600)={0x8, [], 0x0, "6da30b05765f70"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000c40)={{0x0, 0x3f, 0x0, 0x4, 0x0, 0x3, 0x0, 0xa08, 0x0, 0x3, 0xe95, 0x7, 0xffff, 0x2, 0x100}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='xprtrdma_op_allocate\x00'}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000006c0)={r1, r0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000051780)={{0x0, 0x100, 0x2, 0x3ff, 0xc58, 0x8, 0x3, 0x40, 0x7f, 0x661, 0x0, 0x1, 0x80000000, 0x8, 0x2}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='xprtrdma_op_allocate\x00'}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f00000006c0)={r5, r4, "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", "9a50d7441db2e19e5fcc8482ad77b9eab6363e71f37bc0428e50c2e96c15eb7655b26cbdf0cc739083b558956136ebbaad4ad35cc0d9077ac2b94a2fa1dd3e822323adbaeb43febe4cf8c91912a79987e1299569b57a08e5c04a65754e7509df50883e8451276e5bb32d57bc32ba24b27a84c649d2ba50fedc55504470ecedd2470a13bd52b3c223d3146cc3f446c5f7ba6b98b78b8c9002ca418b87adb827ed18b90420864bd25c203f8d5dcd41baaea6967810f3a4fe3cfd7e2aedd3ba2792849246798ba045ddece3b77814da084c2b0b4edec41d1ee489b19da917324b15000a4464dc52b59f35f0b0c110b526c057aa2faadd63065d236a574733039abf565c7555e402459b03963a7c8400dcaa885984b2829a8892ac8b7d6e0a4e1f8105eb8b8e53ed3f86d1ef5c328be75bb7be7b49f41dd6a633f7a68562afe069a5ab855bbbe5a2d3cdda807c9d9acd91d647b9f6996bc2a7efa8858400f2bd78e90586a246bdcd00b03c745976490cbaed581edd50709099cd0a16aeb6dd469e32b3203afa821c638fbf429f5253463fc5786e83e104f928a960e0773db0490f0a53c266d42ad5efd6209d7bfa16f55db82c7732e939db085601a45ec210f5e3b7bb1a45a6f66fd823acfa708da003fa3fc3d94b209ead7c488468b2ca523e3946e7fce499cf920e3216d0e9f79c1344e46186266c9186a428ab10d415bfe9354596d0d755f873824edf20a249b492f73a287703e86726c9397221c80a36c7eaaafa7f3f3adba78352ee92f27ed80d032cc9aedfe72d64522d1971a8c93f21e81d797fb26860f59454c3261570ce9bff2df51072884c801f7cb71b71b5a21d852c261ffd144b4d6007bc2d073177aca72e1f43f795c27e0f8e01fe5ec68c348310a0c4dcce1ce4211d8263ab10edc8004c7c867cfbd38a9625490a72402f92c963e826296f2403b875a129f989e54ad1f034e82b1c4e32baaf208612ca6f20d5ae416afb8411a736bc845960917d35a75d3b81641761476db578fd3ee17a8dd64249d7979dd461d14f5cf02ba6101835f4b280b370255f94d973a25897b0c4005d9e66a7adb863e2c467386ea2577a98dbdb0fe0cbf9f6b07fcd090d7604db257bcd6ef18f88ac03b61d299adce53f1415b6485e0358f98c0d038b3b0ab0242203370d13bc3ae303881dca32b97f65e23fc7a9298fcb6753b8bf1b6e4974685a568a6a65568b921b2212f197f5b67ec70d86abd280aed3df0d923a9c1180972dac1aabd14b830204e17e5e30eaade7eb428be9b8faa4c31718c308c65af1566eacd2d842619da75771a6c6a70d0ec168101cdfbf9432ccf260fa252aeb475d33d677d62fe9e94fe3f6247afd5bd72a0e2dcc1ebb6c15ab7441d232103ed71b675b7d767ce634c4d72cf8184f9228ba524eb1cdb99b97fc0a312fd32ddcf0202388b61954de451536b576ef9c6f8d0d7d2dd4d050e089c1b9e468c6fa7f973a3153f621b5d63ad2195c7a3d97ae7afe1be955198f8f3c04f4881fcff3ec1a1e86fb129ae22d95662ca2ddec83d81df50884895e7aa442de0bae98f2dff2a2b4aa780f9efe21034eb532d8616422dc6ba382ce8e53cc7d55cb8d44dbfccebda028c28cc5e6ad283225cd9f85b8741f83c4f75bfa92ffafd52f1d522628700b950465c13e5219ef3917db3fd97994f6f18464bc44608ee2bd230e8c177c4a2b93ee8f301af30be193d3af8e0257a297ee8c53196f6cf167f8dde4f5834089905a3baef2a9edd75036c8f7a47e43fd07d868e4e1fa714f71caea20376b587f25f11d3b74da3ddd9e5071ac5b295d1326c1115771e135a31000c5573b89b90b8f62bcbe98d0546188c07d3d3ec95877b43f986dd55a38171ea7879259b81f123b504165c0ecb663f10d5450784b7604045012387cc60a078d2a409f443684339c1e53a7eb300b320725a373e70794366c3a908587f069f818b3ce823ce6d868fd01e770f1bf1ddb78810be8b7deb7e20dd1b6de0beac83ea7b43f2959db8f69984286fb056fb6cde2b35d4de885dfa7d5eed5cb0feace1d8042f2d6f6ad23edfd51470fcf219beb20fddf3500240d33c8f3a1743b029ba1dec1a065ea2a13d739c59ba6feeabaeff36cda5b43266ded707b9cc698aaa3929a684f8cff6ad9355476843abc245b0ff7c83c90e7df7966408e023a1a346f6faa91b06cd28515a4705a97882ea0ca1ef2f4f7e9d139e590369e8f88dd533c6a0cfd0150704e082f931c9a15e351416ddcf5d47faaa94b47cd8e9ff23279884e5ffb3f8324a628662427d9c951d1a4501dc3e0b68ee1a51141194c28773b1195f3c1090c3ae1862b719e8d87a63dc7a4ca321048c0d494526719ea3c89804f5ae06d092bb8abcad20093cdc979ed185ea5d3561d16ddb3ac5fa1c610598013f9abee62f63fc778815c7f66e46a0e0cd26c3575ca385acfff58a0d4169d22ed1840ec8b2411fdf2cbd4f1b62e3a22afc3d3048f40eaa39e335bfdbdf7a191e96ac423892d826b96798275e15d05eac393cbb2438f6678ffd026d9db407e1db23ecc1ad7c8a86329a4fa2f1d32550e3f50037d413e6e2927ac93fcadb1f89a923217d0d9ec6d11c275eb714c8132ca2b8da0d4f4a6cfb34b1008fb007c1055a1b238c6150bea03287039ebca14cd7057269ed1a89aad81b94f28357f4aaa8774b551e21a1c4048ed3473fdd7e4f8cc9c995571fe47d692593a6b0a0b63e2df55e54b52c56a01dfe7cfa3a87eab2940e3406834bd81762eb0cf2313cb498f83f5a589e5729b539a1150cbb248b14165b21b1e4e6149fdd3fee4bced05eed5d40724863bb8b2b011c2cd014010c5d5bafe66994cd44302c8dfff9c8ad0c11902615678132de91c790d3775e1f8c266585ecb1d227072b261126b675841f047d40843d6bd89393c8966fc216ee8aa621a09d33bac50d7ecb696f2989ca35934f0af1e12a4e32c68820160722fa3ac9bb389869ef12c1c12daff33f08738e52cd55cc6f5f060f411a8e8a0878c36bda06c65987b7457fdea636969fe3b25e4483ce001b84f3d7a1fc2252aa9c0beadea75a667a948cceb5525d923d20386b5383536a99657c16f96dec2ed560520efb4244d31da20d270134d27b45e429ab124b18e433ca7b8e1279e95d4f7fcdc1d1a34d41269699c017cf8ab526917dac0ed52faa6dc285b9b2b84ff70824a74ac2c9c78d25796847887456329e6eb7d9a462514dfd3a2778deecd9be0926a5449ae31610629ce3044c6cf266cd83cf25242795109ba7f18af392ae36febce3dabfe53a675794c88c2940c88bf9cf68485cd503249bfc7d061d4df816be34ecadd7be4b48322a1e4cdcf07b55c5d2f26443d841d4ea9281eae87a85482a8d2e53ed0f0682878387fc66d10780f7962cdb5da53aa31b3523c0060130864981c6d7af2888ce37ef98eaba4466eb9275771b6477ca7bd38823439fd179ac4941f85b87f63c2d77d8bfd9123e1efcae85782304556d785f8f02bbc733cbd609f285668217bd82c14e4416563e1edbd0a764687a48fe925f48385dc49692d1e5041fbd28d89ec4f18db6f312e84bf6a7a8ead578c8181c4241d0185586e1507d26496a6da29657d149124eebb9e9cbef45eb4e3cda4d7ebec9c6984ded720f11e21ee33b7f59470581bc91683380fa05df0bc127f05782cb031fe39d357da89ffadbc5940ccb6cc96940ad32ab4de1ef6b40fe4e0dc3a2c96508a0047dc3e2b3e56f28c9c9b503b70199ad1109a14bcdae9c22d12d9343fe60272bc50d30c9a7d620d30cfe326e6de032a29b7f705a0003c75a26ba2a69f876225f72da6a7e1e8ca030c69d10345af659e4714fc4a8b4ccd05b18edb29b7c7de7f0e390c8276571f14229caaee52f94fed1620dda5bc9bc50d9fa4017d907c515f6027890b977dc92430fc4af7926dc06fdb01228c0022d7f73407c43382a7da4a0510f07115709a7d627bd9b25be4f68e15d27f23734a6d16bb57696ca224cd734c8d517394bbd07ccf18a2b64054889ee67c8a2a8a08f9e1db86b29c7198b4b7f49b82a892ead19ce8aef8d7d0c334aa867e3781c0757c47027e55ab8a6f0e21f9a0c69471884afdbe1542e364fbc79451d06e48176731a93506eea50aba89c8d3fcf409ff8a1794c181b94eae8b6ec507c8d892a89101e7da80022de5adaf65fe093862e9efcb1af1862025c8406b30f5fee30205110f0f4191871fac6dce1326f0687ef35d310bd5a2f704a2f047a5ec1eb21bfbd925d4ef7546dca1a536504e2a29423ed80940002731e5fc8a0afd03a7964232efef7f6bada3083015a2fa6cf29be7211fa7907698ca9bb10da56b6ee7ffbb5a6df2cac3b8525eaa4b10b3025190dfc39ca0d537372f9680866533d62d7b0e7e0a0158215f01c7aac4da64e74fa9a97bcb04cb6f657202b54c08e5e5795aed2220982928692fbcfceec5ba03f4933f53250c23222be4d2c01c93fddd973d8488d03d2dcb63ed2dcf00654b7329f05f67395664612b9b5efe2683a04c0c0c9466ef472914c6fae6ffe089a8995ea36292564d5b28a737cfc479b8828fb3e857589dffaffbcec14cbc19cb6c77d13d0e415c049cabdde2c290c507a024c0042558dc1f5e1daed636eaa56303f6c02b4d995de655a4d29b2cbba5cf6007462fca427a4eababa2ced06c5eb0012aa94f782afdf3fce93db0e8b895b3e90e683d2633ee24581e52c181638f8db3a47a6975127a8114666da6a558fa3926d4e0f74c7b88a9407939b4c012d2e5c65a5f39138c472f32546c5694356b33b5660adca9cb52c339d33399f5a98f970ef5d6eb705dbd9efaa4011c8ba1f27cda8d82180789c03bc77b8c9886f68d8fdf8a2e0bd140594c0c456d192d82589f4bc8fd537a68601b32eb13c80df7b2de783cceb49e7e388c30d70d9ecaaa348a0f26d1e063d70f9e4fda7d52c13ed29ab122554759e0a39bbec53db2254884ad1d3de51a557672053aa29a82ed7d1a8edb9d18ca04af6f71e1dfd7fd84c1596a6accce53d4de9a45c1d6a6ff80da6a0ace6940a819b90d954032ccc89711d88ea5ff0eac548a390c348d715c5d5686a9dad977e6308464fafafa16566471aa357ad25796654f384e708aad4a484a8f4a8750fd22352584c9a968aa1eb14b1ccfe96ef1a26c027cc79ae0f87487a9d7669fa801f1fec972e339d19ece4a034efa05f6f49146dd508761b2f760c7d7b1a67e2b1e62dba32a9573feaa22190d5cc0660d063d8adc41b16d6b4735c4f25cbc879b71a6ce466d2c8a985e157d59ff97c3f196bcd7be1662b49a06c99ab96fef8e04ba103389e333c17bbe5013ddd2cf77495fdacf2a1dd06621b26b8126adcf21462d45828eccd766653ef9811301badae7a9ac31f3f79886a7"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000051840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='xprtrdma_op_allocate\x00'}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f00000006c0)={r9, r8, "d8aad04f7da578b1541786a857b40e11d3bd45e378ce5511ec3f725eaf62815e2113e40d01a6b633394aa83fc06649020fd653d8a52779cd46a775e63c0c63d1ed54c9455b07fa3b724963451ed23a6e8e48a5913f5e79e51854bd84a5831f35b227a1fc0c74af2de67b332470fdf263b3303f183054b8da2422db02a77cce12d92a5f3e9ad1d84af0cef1133147375af3fc12994c851c282ca951720bdae364fed87f1fd5782d254e961f4781fc38f16c5ff3a06920a7721141c6f3d71e32d0ba43e9ce50f7e5b62824e9ca5be667006903b40d47a9f35c9f1064ed929fb86d0c9501c1c2c0371f6cd7bead902f6feb6bec1ec44f64ec2c919b7da9e941f038", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051a40)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "5c24ad450262d2"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000052a40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053a40)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {r3, r5}, {0x0, r7}, {}, {0x0, r9}, {0x0, r11}, {r12}], 0x2, "68952167b5fbf7"}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) 12:44:10 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa7d0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:10 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", ""]}, 0x2c}}, 0x8010) dup2(r2, r2) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x80) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000001c0)=0x3, &(0x7f0000000340)=0x2) write(r1, &(0x7f0000000040)="d5ad61510fd8ae22d72f618a8091744f401830c5d16b2b57b9a47744de2b6e0a9a74d7d4a16e630d800209ccd3b2614b2f497eb56a9c0593680000000000", 0x3e) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) accept4$unix(r5, 0x0, 0x0, 0x80000) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f0000000640)={{0x3, 0x100, 0x0, 0x8d67455, 0xc0c6, 0xb1}, 0x40, [0x7ff, 0x9, 0xa8a0, 0x8, 0x70f, 0x2ec6d69d, 0x1, 0x20000, 0x8001, 0x20, 0xfffffff9, 0x55000, 0xdc, 0x9, 0x1, 0x1, 0x3, 0x1, 0x4, 0x9a3, 0x6, 0x7ff, 0x0, 0x0, 0xffff, 0x1f, 0x1791, 0x4a29, 0x7, 0x40, 0x3, 0x7fffffff, 0x5, 0x0, 0x8, 0xffffffff, 0x8, 0xfffffffb, 0x5, 0x3, 0x8000, 0x9, 0x6, 0x7, 0x4, 0x1, 0x4, 0x3, 0x8, 0x7, 0x5, 0x1, 0x0, 0x4, 0x40, 0x7b, 0x3f, 0x3ff, 0x10001, 0x7fff, 0xa8fa, 0x3, 0xfe, 0xd3c3, 0x3, 0x7, 0x9, 0x9, 0x3f, 0x20d, 0x7d, 0x100, 0x7, 0x7, 0x7, 0x9, 0x1f, 0x6, 0xf0b, 0x1, 0x6, 0x2, 0x1, 0x1f, 0x101, 0x7, 0x401, 0x6, 0x5, 0x9, 0x2, 0x3, 0x5, 0x40, 0x1, 0xffffffff, 0x3, 0x4, 0x200, 0x80000000, 0x8, 0x8, 0x7, 0x9, 0x8001, 0x304, 0x4, 0xa10e, 0x200, 0xffffff81, 0x9, 0x7ff, 0x4, 0x0, 0x81, 0x101, 0x40, 0x3, 0x1f, 0xf027, 0x6, 0x0, 0x7fff, 0x1, 0x1, 0x1000, 0x7, 0x5, 0x5, 0x4, 0x8, 0x7fffffff, 0xfff, 0x0, 0x7c, 0x401, 0x2, 0x9, 0x3ed, 0x200, 0x6, 0x9, 0x29, 0x5106, 0x9, 0x2, 0x5c16, 0x1, 0x5b05, 0x7, 0xff, 0x3f, 0x8, 0x7fffffff, 0x2a, 0x100, 0x4, 0x20, 0x1, 0x8001, 0x6, 0x80000001, 0x1, 0x72a, 0x4, 0x7, 0x3, 0x2, 0xa5, 0xffff0abb, 0x3ff, 0xcf0c, 0x3, 0x9, 0xff, 0x17ac5302, 0x8000, 0x0, 0x6, 0xfff, 0x2, 0xfff, 0x7, 0xae9, 0x5, 0x7, 0x7, 0x1, 0xa3, 0x7, 0x6, 0x3, 0x10000, 0x800, 0x4, 0xffffff67, 0x1, 0x4, 0x100, 0xef4, 0x10000, 0x40, 0x7, 0x333, 0x3f, 0x1000, 0x0, 0x5, 0x100, 0x1, 0x8, 0x6, 0x1, 0x3, 0x53, 0xdcc, 0x3, 0x9, 0x7, 0x80, 0x1, 0x0, 0x6, 0x85ae, 0x4, 0x2, 0x0, 0xb97, 0xfffffffc, 0xffffffc0, 0xcf, 0x9, 0xfffffff8, 0x5, 0x5, 0x20, 0xffffffff, 0x5, 0x1, 0x1, 0xc00000, 0xda0, 0x9, 0x81, 0x2, 0x3, 0x1ff, 0x6, 0xfffffffb, 0xffffffff, 0xbc0, 0x9, 0x6, 0x10000, 0x9, 0x8, 0x2, 0x5, 0x5, 0x8, 0x5, 0x40, 0x4, 0x3, 0x80000000, 0x2, 0x21, 0x1c8, 0x101, 0x7f, 0x1, 0x80, 0x100, 0x4, 0x8000, 0x4, 0x1, 0xed84, 0x5, 0x7fff, 0x6, 0x7ff, 0x3, 0x80000001, 0x5, 0x1, 0x7, 0x80000001, 0x200, 0xe, 0x100, 0xfffffffc, 0x6, 0x8, 0x1ff, 0x80000000, 0x23fee70f, 0x6, 0xfd4, 0x8, 0x3, 0x8, 0xfbb, 0x800, 0x2bdcc1e9, 0x5, 0xfff, 0xec3, 0x80, 0x4, 0x1, 0xffff0b1d, 0x7, 0x4, 0x40, 0x2, 0xd2c, 0x0, 0x1, 0x0, 0xed, 0x2, 0xfffffffb, 0x4, 0x3, 0x9, 0x4, 0x6, 0x3, 0x2, 0x200, 0x81, 0x8d7, 0x446a5647, 0xffffffe0, 0x0, 0x3ff, 0x9, 0x7, 0x7, 0x3, 0x6, 0x7, 0x0, 0x10000, 0x8, 0x5, 0xff, 0x4, 0x100, 0x4, 0x6, 0x8001, 0x1, 0x80000, 0xd4cc, 0x2, 0x8dbf, 0x7fff, 0x5, 0x7f, 0x3, 0x1, 0x2000000, 0x3, 0xa19, 0x10000, 0x81, 0x3, 0x7, 0x5, 0x9ea2, 0x8, 0x81, 0x0, 0xffff, 0xaa4, 0x4, 0x0, 0x5, 0x1764, 0x101, 0x3, 0xffff0001, 0x3, 0x4, 0x7, 0xfffffffc, 0x4d, 0x8, 0x4843, 0x8001, 0x8000, 0x7, 0x2, 0xfffffff8, 0x8, 0xe27a, 0x9, 0x52f, 0x1, 0x7ff, 0xf0, 0x40, 0x200, 0xfff, 0x13b9, 0xdd26, 0x7, 0x1, 0x0, 0x0, 0x1, 0x1ff, 0x9, 0x1000, 0x7f, 0x8, 0x1, 0x6, 0x4, 0x43, 0x3, 0xfffffffd, 0x7, 0x0, 0x0, 0x1, 0xdfc2, 0x1f, 0x1, 0x2, 0xbe, 0x80000000, 0x5, 0x3, 0xfffffff8, 0x80, 0x80000001, 0x3, 0x1, 0x80000000, 0x7e00000, 0x401, 0x8000, 0xd1, 0x2, 0x6, 0x100, 0x8000, 0x1, 0x8, 0x400, 0x101, 0x101, 0x631, 0x0, 0x8, 0x7fff, 0x1, 0x0, 0x9, 0x1f, 0xffffffbd, 0x7fffffff, 0xfffff2f6, 0x2, 0x9, 0x9, 0x7f, 0x0, 0xfff, 0x7fffffff, 0x1, 0x5, 0x1, 0x3, 0x5, 0xac, 0x100, 0xfc1b, 0x9, 0x7d4, 0x4, 0x438, 0x0, 0x7fffffff, 0x588, 0x0, 0x1, 0xe3c, 0xfffffff7, 0x0, 0x7f, 0x4, 0xa2d0, 0x50, 0x8, 0xffff3691, 0x5, 0x10000, 0x1, 0x1, 0x7fffffff, 0x4, 0x4, 0x1, 0x2, 0x5, 0x1, 0x0, 0x62d, 0x200, 0x80000000, 0x7, 0x18bb, 0xfa5, 0x234, 0x0, 0x1, 0xfffff9e5, 0x2, 0x200, 0x198, 0x3ff, 0x7fffffff, 0xff, 0x10001, 0x1f, 0x8, 0x6, 0x583, 0x1ff, 0x7f, 0xe36, 0x1, 0x9d7, 0x0, 0x9, 0xffffffff, 0x6, 0x7fffffff, 0x1, 0x4e4, 0x0, 0xffffff00, 0x82a3f4e4, 0x8001, 0x9, 0x3ff, 0x7, 0x685, 0x3, 0x1ff, 0x8, 0x6, 0x45, 0x1, 0x558b, 0x101, 0x4, 0x7, 0x8, 0x9, 0x4, 0x3, 0x3, 0xffffffff, 0x4, 0x5, 0x6, 0x81, 0x4, 0x2fd5678a, 0x4, 0x5a4, 0x4, 0x0, 0x8, 0x7, 0xfffffffc, 0x7fffffff, 0xfdc8, 0x7ff, 0x7, 0x101, 0x5, 0x7, 0xe479, 0xfffff000, 0x5, 0x1, 0x1000000, 0x9, 0x7, 0x5, 0x7303, 0x80, 0x1b7, 0x20, 0x3, 0x3, 0x9, 0x7, 0x2, 0x2, 0x80000001, 0xfffffffb, 0x10f, 0x20, 0x8, 0x7, 0x9, 0x6, 0x1, 0x2, 0x3, 0x3, 0xff, 0x10000, 0x4, 0x9, 0x1, 0x0, 0x3f, 0x2, 0x2, 0x80000000, 0x20, 0x2, 0x400, 0x1, 0x7ff0000, 0x0, 0x9, 0x6, 0x80000000, 0x4, 0x7fffffff, 0x5, 0xfac5, 0x3, 0x8, 0x0, 0x3, 0x4, 0x5, 0x1, 0x10000, 0xfc, 0xf, 0x3, 0x5, 0x80000001, 0x101, 0x8, 0x5, 0x1f7b, 0x3, 0x9, 0x8, 0x40, 0x1, 0x5, 0x2, 0x712, 0x8, 0x237, 0xe8, 0x800, 0xfffff000, 0x5, 0x10001, 0x20000000, 0x7, 0x67b9, 0x4, 0xffffffff, 0x6, 0x10001, 0x7, 0x101, 0x8, 0x0, 0x5, 0x40, 0x8001, 0x5, 0x6f8, 0x8, 0x5, 0x80, 0x9, 0x7, 0x7f, 0xfff, 0x1c, 0x1, 0x1, 0x7, 0x800, 0x3f, 0x34b, 0xff, 0x9, 0x5, 0x3, 0x7ff, 0x4, 0x4, 0x6, 0x2, 0x1, 0x4000000, 0x4, 0x7ff, 0x0, 0x5, 0xfffffffe, 0xabf, 0x3c5, 0x40, 0x0, 0x8001, 0x9, 0x2, 0x5, 0x9, 0x2, 0xec7a, 0x5, 0x4, 0xfffff001, 0x7, 0x7e68, 0x800, 0x200, 0x1, 0x6d, 0x2, 0x7, 0xfff, 0x4, 0x7ff, 0x1, 0x9, 0x0, 0x401, 0x9, 0x101, 0x7fff, 0x3, 0x68, 0xb6, 0x7, 0x8000, 0x10000, 0x7ff, 0x4, 0xcbcb, 0x7, 0x0, 0x1, 0xc40, 0x9c37, 0x7, 0x81, 0x8, 0x8, 0x1ff, 0x1f, 0x20, 0xf9, 0x6, 0x4, 0x5, 0x7fff, 0xfff, 0x3, 0x7, 0x20, 0x5, 0x7fffffff, 0x7ff, 0x9861, 0x7, 0x2, 0x4e3, 0x5, 0x5, 0x0, 0xfff, 0x3, 0xa29, 0xff, 0x5, 0x879a, 0xfffffff7, 0x9, 0x5, 0x2, 0xfffffff9, 0x9, 0x1fce00, 0x1, 0x7, 0xdab, 0x80000000, 0xffff, 0x7, 0xa188, 0x9, 0x9, 0x6, 0x0, 0x10000, 0x8000, 0x8, 0x4, 0x12000000, 0xae, 0xfff, 0x101, 0x4, 0x7f, 0x6, 0x3, 0x2, 0x100, 0x1, 0xfff, 0x40000000, 0x6, 0x3f, 0x3, 0x7f, 0x0, 0x40, 0x9, 0x9, 0x40, 0x7, 0x7ff, 0x7fffffff, 0x7fb1, 0x5, 0x4, 0xd0, 0x81, 0x9c, 0x401, 0x101, 0xffffffff, 0xdb4, 0x0, 0x0, 0x9, 0xd67c, 0xd333, 0x2, 0x5, 0x1, 0x7, 0x10000, 0x4, 0x400, 0xa4, 0x2, 0x6, 0x5, 0x0, 0x0, 0x54, 0x2, 0x5, 0x3ff, 0x0, 0xffffffff, 0x5, 0x697a, 0x101, 0xfff, 0x1, 0x3, 0x2, 0xa3, 0x1, 0x200, 0x80000001, 0x8, 0x81, 0x10001, 0x3, 0x7, 0x2, 0x0, 0x8001, 0x9, 0x3, 0xe97, 0x8, 0x9, 0x0, 0x95, 0x2, 0x3c52, 0x8, 0x8001, 0xd34c, 0x2, 0xfff, 0x1000, 0x8bd7, 0x6, 0xffffffc1, 0x0, 0x7, 0x5, 0xca70, 0x3c9086d7, 0x1, 0x7fff, 0xe8b8, 0x0, 0x439, 0x5c87, 0x10001, 0x4, 0x8, 0x3, 0x7, 0x8000, 0x5363, 0x6, 0x6, 0x3, 0x9, 0x5, 0x200, 0x66, 0x5, 0x7ff, 0xfffffffb, 0x1, 0x8, 0x8001, 0x5, 0x80000001, 0x300000, 0x30, 0x10000, 0x9, 0x675, 0xa8, 0x7, 0x0, 0x2, 0x401, 0x1, 0x2fd, 0x0, 0x1, 0xc1, 0x7290, 0x0, 0x7, 0x7, 0x1000, 0x20, 0x80000000, 0x1, 0x7, 0xd315, 0x5, 0x81, 0x1, 0x2, 0x2, 0x5, 0x800, 0x40, 0x0, 0x10001, 0x6, 0x1ff, 0xffffff01, 0xe57, 0x1, 0x4, 0x61, 0x7, 0x1000, 0x0, 0x7, 0x101, 0x80000000, 0xfffffd9d, 0x4, 0x9, 0x6, 0xff, 0xb3, 0x10000, 0x0, 0x4209, 0x26, 0x4, 0x2, 0x7, 0xfffff759, 0x3ff, 0x9, 0xffffffff, 0x7, 0xfffffffb, 0x200, 0xffff0001, 0x9, 0x1, 0x9438, 0x4, 0x3, 0x4, 0xffff6385]}) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000600)={&(0x7f0000000380), 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1d4, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, [], 0x1}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffffff81, @private2={0xfc, 0x2, [], 0x1}, 0x7}}}}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x71e}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffff7f}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xba}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2a}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x945}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) 12:44:10 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3e8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:10 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d582574, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 488.172952][T25763] FAULT_INJECTION: forcing a failure. [ 488.172952][T25763] name failslab, interval 1, probability 0, space 0, times 0 [ 488.187223][T25766] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 488.202130][T25766] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 488.227850][T25763] CPU: 0 PID: 25763 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 488.238116][T25763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.244238][T25766] Quota error (device loop4): write_blk: dquota write failed [ 488.248158][T25763] Call Trace: [ 488.248175][T25763] dump_stack+0x1dd/0x24e [ 488.248184][T25763] ? devkmsg_release+0x11c/0x11c [ 488.248198][T25763] ? show_regs_print_info+0x12/0x12 [ 488.263243][T25766] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 488.268034][T25763] should_fail+0x6fb/0x860 [ 488.268044][T25763] ? setup_fault_attr+0x3d0/0x3d0 [ 488.268054][T25763] ? __ip6_append_data+0x285e/0x3a90 [ 488.268068][T25763] should_failslab+0x5/0x20 [ 488.281300][T25766] Quota error (device loop4): write_blk: dquota write failed [ 488.283009][T25763] __kmalloc_track_caller+0x5d/0x2c0 [ 488.283022][T25763] ? kmem_cache_alloc+0x1e0/0x270 12:44:10 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa880, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:10 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x445, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:10 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5825d5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:10 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4d8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:10 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x500, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:10 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x531, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 488.292729][T25766] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 488.297675][T25763] ? __ip6_append_data+0x285e/0x3a90 [ 488.297684][T25763] __alloc_skb+0xd1/0x4d0 [ 488.297692][T25763] ? skb_put+0x114/0x1e0 [ 488.297706][T25763] __ip6_append_data+0x285e/0x3a90 [ 488.313232][T25787] Quota error (device loop4): write_blk: dquota write failed [ 488.314789][T25763] ? __ip6_append_data+0x2231/0x3a90 [ 488.314804][T25763] ? ip6_setup_cork+0x1470/0x1470 [ 488.323110][T25787] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 488.329572][T25763] ? ip6_append_data+0x2c0/0x2c0 [ 488.329580][T25763] ? lock_sock_nested+0x27a/0x310 [ 488.329588][T25763] ? xfrm_lookup_route+0x5f/0x170 [ 488.329600][T25763] ip6_append_data+0x1ad/0x2c0 [ 488.395684][T25763] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 488.400964][T25763] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 488.406240][T25763] rawv6_sendmsg+0x1b00/0x2cf0 [ 488.411006][T25763] ? compat_rawv6_ioctl+0x10/0x10 [ 488.416159][T25763] ? selinux_socket_sendmsg+0x11f/0x340 [ 488.421674][T25763] ? memset+0x1f/0x40 [ 488.425622][T25763] ? inet_send_prepare+0x1b7/0x470 [ 488.430701][T25763] ? inet_send_prepare+0x470/0x470 [ 488.435814][T25763] __sys_sendto+0x4f6/0x6c0 [ 488.440285][T25763] ? __ia32_sys_getpeername+0x80/0x80 [ 488.445643][T25763] ? vfs_write+0x427/0x4f0 [ 488.450029][T25763] ? debug_smp_processor_id+0x20/0x20 [ 488.455369][T25763] ? __ia32_sys_read+0x80/0x80 [ 488.460098][T25763] __x64_sys_sendto+0xda/0xf0 [ 488.464751][T25763] do_syscall_64+0xcb/0x150 [ 488.469229][T25763] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 488.475087][T25763] RIP: 0033:0x45e149 [ 488.478948][T25763] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 488.498518][T25763] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 488.506893][T25763] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 488.514877][T25763] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 12:44:10 executing program 3 (fault-call:1 fault-nth:68): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:10 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xac15, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:10 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x598, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 488.522818][T25763] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 488.530756][T25763] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000043 [ 488.538736][T25763] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 488.589223][T25803] FAULT_INJECTION: forcing a failure. [ 488.589223][T25803] name failslab, interval 1, probability 0, space 0, times 0 [ 488.602041][T25803] CPU: 0 PID: 25803 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 488.612300][T25803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.622389][T25803] Call Trace: [ 488.625652][T25803] dump_stack+0x1dd/0x24e [ 488.629953][T25803] ? devkmsg_release+0x11c/0x11c [ 488.634860][T25803] ? show_regs_print_info+0x12/0x12 [ 488.640027][T25803] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 488.646076][T25803] should_fail+0x6fb/0x860 [ 488.650466][T25803] ? setup_fault_attr+0x3d0/0x3d0 [ 488.655466][T25803] ? __alloc_skb+0x88/0x4d0 [ 488.659937][T25803] should_failslab+0x5/0x20 [ 488.664406][T25803] kmem_cache_alloc+0x36/0x270 [ 488.669136][T25803] __alloc_skb+0x88/0x4d0 [ 488.673434][T25803] ? skb_put+0x114/0x1e0 [ 488.677643][T25803] __ip6_append_data+0x285e/0x3a90 [ 488.682737][T25803] ? __ip6_append_data+0x2231/0x3a90 [ 488.687989][T25803] ? ip6_setup_cork+0x1470/0x1470 [ 488.692978][T25803] ? ip6_append_data+0x2c0/0x2c0 [ 488.697881][T25803] ? lock_sock_nested+0x27a/0x310 [ 488.702871][T25803] ? xfrm_lookup_route+0x5f/0x170 [ 488.707877][T25803] ip6_append_data+0x1ad/0x2c0 [ 488.712615][T25803] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 488.717866][T25803] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 488.723116][T25803] rawv6_sendmsg+0x1b00/0x2cf0 [ 488.727848][T25803] ? compat_rawv6_ioctl+0x10/0x10 [ 488.732840][T25803] ? selinux_socket_sendmsg+0x11f/0x340 [ 488.738354][T25803] ? memset+0x1f/0x40 [ 488.742304][T25803] ? inet_send_prepare+0x1b7/0x470 [ 488.747380][T25803] ? inet_send_prepare+0x470/0x470 [ 488.752460][T25803] __sys_sendto+0x4f6/0x6c0 [ 488.756929][T25803] ? __ia32_sys_getpeername+0x80/0x80 [ 488.762267][T25803] ? debug_smp_processor_id+0x20/0x20 [ 488.767621][T25803] ? __fpregs_load_activate+0x2d3/0x390 [ 488.773133][T25803] ? switch_fpu_return+0x10/0x10 [ 488.778036][T25803] __x64_sys_sendto+0xda/0xf0 [ 488.782686][T25803] do_syscall_64+0xcb/0x150 [ 488.787157][T25803] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 488.793017][T25803] RIP: 0033:0x45e149 [ 488.796893][T25803] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 488.816484][T25803] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 488.824883][T25803] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 488.832836][T25803] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 488.840778][T25803] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 488.848730][T25803] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000044 [ 488.856680][T25803] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) clone3(&(0x7f0000000500)={0x100002800, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x2f}, &(0x7f0000000440)=""/51, 0x33, &(0x7f0000000480), &(0x7f00000004c0)=[r0, 0xffffffffffffffff], 0x2}, 0x58) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@random={'os2.', 'ext4\x00'}, &(0x7f0000000340)='ext4\x00', 0x5, 0x2) 12:44:11 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d582728, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xad68, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5c8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 3 (fault-call:1 fault-nth:69): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5e4, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xadb1, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d582827, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x600, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5828da, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb064, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 489.072801][T25816] FAULT_INJECTION: forcing a failure. [ 489.072801][T25816] name failslab, interval 1, probability 0, space 0, times 0 [ 489.103386][T25817] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:44:11 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000001c40)="dae31396cd8c1a0bc566a4db5ab84580fe30597b62ab7d154b69d63bc1977697b29f70a4c7221a38c83ef3c17e8a10afaaa260856a3cdba1cdc38f31912ba659259597c4e436d6ff89ce1ba9b7cc301a6ebab42b726eae82d0c69d1996e3e36ec986ee6f0a2257d90d5fe233365841ae8ad8b168005beca58811febbc57d8ff28daba28717aa6b8377cc55e99720780ca85b65c7164eff25a22f8c278e3e21923fe10a6012a8365d65c61f1e8f1e39e17f93e5e84e7eaecfff377995bc09aa3af2a9783b891d0ff4d86c859c19e53bc4f25689af2f332858e7", 0xd9) ioctl$TCSETXF(r0, 0x5434, &(0x7f0000000080)={0x3, 0x8, [0x200, 0xc36, 0x0, 0x401, 0x1000], 0x100}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge_slave_0\x00'}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) accept4$unix(r5, 0x0, 0x0, 0x80000) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000c40)={{0x0, 0x5, 0x0, 0x4, 0x0, 0x3, 0x3, 0x9, 0x0, 0x3, 0xe95, 0x107, 0x3, 0x2, 0x100}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000380)={{0x0, 0x2, 0x132, 0x800, 0x3, 0x1, 0x4, 0x2, 0x5, 0x15, 0x2, 0x667, 0x7f, 0x5}}) sendmsg$IPSET_CMD_TEST(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000001d40)=ANY=[@ANYBLOB="4c0000000b060108000000000000fb0001000007380008800c000780060005404e2300001c0007801800018014000240ff020000ffffff000c00078006001d40000604000c45db314e4bc4ef35865efd66d9a3e641b51a660fae48a853c3292165e80b6849e75d1bde8d6eee62bab44f48932b5cfea1f6bd9255ac5b04775f6cd9418ce0db323947fa29b974adf2ed56a9e463e2b7dc8a73f4ae4fe4ff3ac2591c2b94b40ca14e63a2c1ff1d03adaeee8ad224a04f2f44bb5d1e0000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2080}, 0x4040000) read(r1, &(0x7f0000000200)=""/246, 0xf6) [ 489.127918][T25817] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 489.148441][T25816] CPU: 0 PID: 25816 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 489.153402][T25817] Quota error (device loop4): write_blk: dquota write failed [ 489.158603][T25816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 12:44:11 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000340)={{r1, r2+60000000}, {r3, r4+60000000}}, &(0x7f0000000380)) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) [ 489.158607][T25816] Call Trace: [ 489.158623][T25816] dump_stack+0x1dd/0x24e [ 489.158633][T25816] ? devkmsg_release+0x11c/0x11c [ 489.158642][T25816] ? show_regs_print_info+0x12/0x12 [ 489.158653][T25816] should_fail+0x6fb/0x860 [ 489.158666][T25816] ? setup_fault_attr+0x3d0/0x3d0 [ 489.166281][T25817] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 489.176165][T25816] ? __ip6_append_data+0x285e/0x3a90 [ 489.176175][T25816] should_failslab+0x5/0x20 [ 489.176186][T25816] __kmalloc_track_caller+0x5d/0x2c0 12:44:11 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x700, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb1ad, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d582b00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 489.176194][T25816] ? kmem_cache_alloc+0x1e0/0x270 [ 489.176207][T25816] ? __ip6_append_data+0x285e/0x3a90 [ 489.183150][T25817] Quota error (device loop4): write_blk: dquota write failed [ 489.183769][T25816] __alloc_skb+0xd1/0x4d0 [ 489.188928][T25817] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 489.193847][T25816] ? skb_put+0x114/0x1e0 [ 489.193859][T25816] __ip6_append_data+0x285e/0x3a90 [ 489.193873][T25816] ? __ip6_append_data+0x2231/0x3a90 [ 489.274305][T25816] ? ip6_setup_cork+0x1470/0x1470 [ 489.279321][T25816] ? ip6_append_data+0x2c0/0x2c0 [ 489.284247][T25816] ? lock_sock_nested+0x27a/0x310 [ 489.289261][T25816] ? xfrm_lookup_route+0x5f/0x170 [ 489.294269][T25816] ip6_append_data+0x1ad/0x2c0 [ 489.299027][T25816] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 489.304278][T25816] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 489.309532][T25816] rawv6_sendmsg+0x1b00/0x2cf0 [ 489.314266][T25816] ? compat_rawv6_ioctl+0x10/0x10 [ 489.319259][T25816] ? selinux_socket_sendmsg+0x11f/0x340 [ 489.324901][T25816] ? memset+0x1f/0x40 [ 489.328965][T25816] ? inet_send_prepare+0x1b7/0x470 [ 489.334047][T25816] ? inet_send_prepare+0x470/0x470 [ 489.339147][T25816] __sys_sendto+0x4f6/0x6c0 [ 489.343623][T25816] ? __ia32_sys_getpeername+0x80/0x80 [ 489.348972][T25816] ? vfs_write+0x427/0x4f0 [ 489.353370][T25816] ? debug_smp_processor_id+0x20/0x20 [ 489.358712][T25816] ? __ia32_sys_read+0x80/0x80 [ 489.363443][T25816] __x64_sys_sendto+0xda/0xf0 [ 489.368092][T25816] do_syscall_64+0xcb/0x150 [ 489.372565][T25816] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 489.378440][T25816] RIP: 0033:0x45e149 [ 489.382302][T25816] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 489.401890][T25816] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 489.410284][T25816] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 489.418224][T25816] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 12:44:11 executing program 3 (fault-call:1 fault-nth:70): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb300, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x897, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d582b6d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x900, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:11 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb595, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 489.426180][T25816] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 489.434120][T25816] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000045 [ 489.442058][T25816] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:11 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d582c00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 489.496748][T25854] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 489.529367][T25866] FAULT_INJECTION: forcing a failure. [ 489.529367][T25866] name failslab, interval 1, probability 0, space 0, times 0 [ 489.532160][T25854] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 489.548317][T25866] CPU: 0 PID: 25866 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 489.566639][T25866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 489.576675][T25866] Call Trace: [ 489.579995][T25866] dump_stack+0x1dd/0x24e [ 489.584336][T25866] ? devkmsg_release+0x11c/0x11c [ 489.589240][T25866] ? show_regs_print_info+0x12/0x12 [ 489.594418][T25866] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 489.600449][T25866] should_fail+0x6fb/0x860 [ 489.604834][T25866] ? setup_fault_attr+0x3d0/0x3d0 [ 489.609824][T25866] ? __alloc_skb+0x88/0x4d0 [ 489.614302][T25866] should_failslab+0x5/0x20 [ 489.618783][T25866] kmem_cache_alloc+0x36/0x270 [ 489.623516][T25866] __alloc_skb+0x88/0x4d0 [ 489.627813][T25866] ? skb_put+0x114/0x1e0 [ 489.632023][T25866] __ip6_append_data+0x285e/0x3a90 [ 489.637109][T25866] ? __ip6_append_data+0x2231/0x3a90 [ 489.642375][T25866] ? ip6_setup_cork+0x1470/0x1470 [ 489.647369][T25866] ? ip6_append_data+0x2c0/0x2c0 [ 489.652276][T25866] ? lock_sock_nested+0x27a/0x310 [ 489.657271][T25866] ? xfrm_lookup_route+0x5f/0x170 [ 489.662279][T25866] ip6_append_data+0x1ad/0x2c0 [ 489.667021][T25866] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 489.672320][T25866] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 489.677628][T25866] rawv6_sendmsg+0x1b00/0x2cf0 [ 489.682377][T25866] ? compat_rawv6_ioctl+0x10/0x10 [ 489.687379][T25866] ? selinux_socket_sendmsg+0x11f/0x340 [ 489.692893][T25866] ? memset+0x1f/0x40 [ 489.697034][T25866] ? inet_send_prepare+0x1b7/0x470 [ 489.702114][T25866] ? inet_send_prepare+0x470/0x470 [ 489.707204][T25866] __sys_sendto+0x4f6/0x6c0 [ 489.711683][T25866] ? __ia32_sys_getpeername+0x80/0x80 [ 489.717026][T25866] ? vfs_write+0x427/0x4f0 [ 489.721847][T25866] ? debug_smp_processor_id+0x20/0x20 [ 489.727186][T25866] ? __ia32_sys_read+0x80/0x80 [ 489.731920][T25866] __x64_sys_sendto+0xda/0xf0 [ 489.736565][T25866] do_syscall_64+0xcb/0x150 [ 489.741044][T25866] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 489.746903][T25866] RIP: 0033:0x45e149 [ 489.750770][T25866] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 489.770353][T25866] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 489.778753][T25866] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 489.786694][T25866] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 489.794638][T25866] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 489.802574][T25866] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000046 [ 489.810511][T25866] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:12 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9dd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:12 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d582cc0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:12 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb745, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:12 executing program 3 (fault-call:1 fault-nth:71): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:12 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x2, 0xfa, 0x8, 0xf9, 0x0, 0x7eb5, 0x102, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x10020, 0x5, 0x100c99, 0x9, 0x96d2, 0x7, 0x2}, 0x0, 0x400000000000007, 0xffffffffffffffff, 0x9) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept4$unix(r3, 0x0, 0x0, 0x80000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xb) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000000100)) 12:44:12 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:12 executing program 4: syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f00000003c0)="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", 0x13f, 0x4000400}, {&(0x7f0000000640)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x7}, {&(0x7f00000000c0)="3ff3bd8209ad4940afaf525bad", 0xd, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d408655fd4f4655f9566e34a10f63ca4b635690000f4655f00000000000081008000008010000800000000000af301000400000000000000080000000200003000", 0x49, 0x4800}, {&(0x7f0000000140)="111fc0d901000000800000dfbf49008000000000008a6aac183ab85dd3180314e5e0e36be95dcd2ac6e651194806d6a08db68a345deaae528b3972e11eb9f3e25262731c36b3be1f2b40e16630f3c1ddb8bd260310b037f6ef26c00f7a48a92235385edacbd896789e67ef49b27b726a6ae7e4ab50d3a032cc", 0x79, 0x30000}], 0x14409, &(0x7f0000000680)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') mount$binder(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='binder\x00', 0x2200000, &(0x7f0000000580)={[{@stats='stats=global'}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@permit_directio='permit_directio'}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) open(&(0x7f0000000300)='./file0\x00', 0x2000, 0x11b) open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x141043, 0x50) rmdir(&(0x7f0000000600)='./file0\x00') 12:44:12 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb30, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:12 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd15, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:12 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xdc8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 490.345401][T25882] FAULT_INJECTION: forcing a failure. [ 490.345401][T25882] name failslab, interval 1, probability 0, space 0, times 0 [ 490.358296][T25882] CPU: 0 PID: 25882 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 490.368436][T25882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.378479][T25882] Call Trace: [ 490.381768][T25882] dump_stack+0x1dd/0x24e [ 490.386090][T25882] ? devkmsg_release+0x11c/0x11c 12:44:12 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:12 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf75, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:12 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x107b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 490.391019][T25882] ? show_regs_print_info+0x12/0x12 [ 490.396216][T25882] should_fail+0x6fb/0x860 [ 490.400624][T25882] ? setup_fault_attr+0x3d0/0x3d0 [ 490.405640][T25882] ? __ip6_append_data+0x285e/0x3a90 [ 490.410912][T25882] should_failslab+0x5/0x20 [ 490.415408][T25882] __kmalloc_track_caller+0x5d/0x2c0 [ 490.420690][T25882] ? kmem_cache_alloc+0x1e0/0x270 [ 490.425705][T25882] ? __ip6_append_data+0x285e/0x3a90 [ 490.431041][T25882] __alloc_skb+0xd1/0x4d0 [ 490.435374][T25882] ? skb_put+0x114/0x1e0 [ 490.439617][T25882] __ip6_append_data+0x285e/0x3a90 [ 490.444726][T25882] ? __ip6_append_data+0x2231/0x3a90 [ 490.450000][T25882] ? ip6_setup_cork+0x1470/0x1470 [ 490.455005][T25882] ? ip6_append_data+0x2c0/0x2c0 [ 490.459922][T25882] ? lock_sock_nested+0x27a/0x310 [ 490.464934][T25882] ? xfrm_lookup_route+0x5f/0x170 [ 490.469944][T25882] ip6_append_data+0x1ad/0x2c0 [ 490.474691][T25882] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 490.479955][T25882] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 490.485219][T25882] rawv6_sendmsg+0x1b00/0x2cf0 [ 490.489995][T25882] ? compat_rawv6_ioctl+0x10/0x10 [ 490.495000][T25882] ? selinux_socket_sendmsg+0x11f/0x340 [ 490.500517][T25882] ? memset+0x1f/0x40 [ 490.504503][T25882] ? inet_send_prepare+0x1b7/0x470 [ 490.509582][T25882] ? inet_send_prepare+0x470/0x470 [ 490.514696][T25882] __sys_sendto+0x4f6/0x6c0 [ 490.519170][T25882] ? __ia32_sys_getpeername+0x80/0x80 [ 490.524543][T25882] ? vfs_write+0x427/0x4f0 [ 490.528932][T25882] ? debug_smp_processor_id+0x20/0x20 [ 490.534287][T25882] ? __ia32_sys_read+0x80/0x80 [ 490.539040][T25882] __x64_sys_sendto+0xda/0xf0 [ 490.543688][T25882] do_syscall_64+0xcb/0x150 [ 490.548161][T25882] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 490.554017][T25882] RIP: 0033:0x45e149 [ 490.557880][T25882] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 490.577448][T25882] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 490.585859][T25882] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 12:44:12 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d582d58, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:12 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb848, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:12 executing program 3 (fault-call:1 fault-nth:72): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 490.593841][T25882] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 490.601792][T25882] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 490.609729][T25882] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000047 [ 490.617711][T25882] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 490.657036][T25908] FAULT_INJECTION: forcing a failure. [ 490.657036][T25908] name failslab, interval 1, probability 0, space 0, times 0 [ 490.672408][T25908] CPU: 1 PID: 25908 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 490.682545][T25908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.692590][T25908] Call Trace: [ 490.695872][T25908] dump_stack+0x1dd/0x24e [ 490.700180][T25908] ? devkmsg_release+0x11c/0x11c [ 490.705091][T25908] ? show_regs_print_info+0x12/0x12 [ 490.710261][T25908] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 490.716300][T25908] should_fail+0x6fb/0x860 [ 490.720687][T25908] ? setup_fault_attr+0x3d0/0x3d0 [ 490.725684][T25908] ? __alloc_skb+0x88/0x4d0 [ 490.730155][T25908] should_failslab+0x5/0x20 [ 490.734629][T25908] kmem_cache_alloc+0x36/0x270 [ 490.739364][T25908] __alloc_skb+0x88/0x4d0 [ 490.743661][T25908] ? skb_put+0x114/0x1e0 [ 490.747874][T25908] __ip6_append_data+0x285e/0x3a90 [ 490.752956][T25908] ? __ip6_append_data+0x2231/0x3a90 [ 490.758214][T25908] ? ip6_setup_cork+0x1470/0x1470 [ 490.763209][T25908] ? ip6_append_data+0x2c0/0x2c0 [ 490.768114][T25908] ? lock_sock_nested+0x27a/0x310 [ 490.773105][T25908] ? xfrm_lookup_route+0x5f/0x170 [ 490.778098][T25908] ip6_append_data+0x1ad/0x2c0 [ 490.782831][T25908] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 490.788085][T25908] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 490.793337][T25908] rawv6_sendmsg+0x1b00/0x2cf0 [ 490.798075][T25908] ? compat_rawv6_ioctl+0x10/0x10 [ 490.803071][T25908] ? selinux_socket_sendmsg+0x11f/0x340 [ 490.808587][T25908] ? memset+0x1f/0x40 [ 490.812537][T25908] ? inet_send_prepare+0x1b7/0x470 [ 490.817617][T25908] ? inet_send_prepare+0x470/0x470 [ 490.822696][T25908] __sys_sendto+0x4f6/0x6c0 [ 490.827185][T25908] ? __ia32_sys_getpeername+0x80/0x80 [ 490.832527][T25908] ? vfs_write+0x427/0x4f0 [ 490.836913][T25908] ? debug_smp_processor_id+0x20/0x20 [ 490.842252][T25908] ? __ia32_sys_read+0x80/0x80 [ 490.846988][T25908] __x64_sys_sendto+0xda/0xf0 [ 490.851633][T25908] do_syscall_64+0xcb/0x150 [ 490.856111][T25908] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 490.862074][T25908] RIP: 0033:0x45e149 [ 490.865941][T25908] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 490.885515][T25908] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 490.893895][T25908] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 490.901849][T25908] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 490.909794][T25908] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 490.917742][T25908] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000048 [ 490.925690][T25908] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 490.957735][T25906] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 490.972479][T25913] Invalid mount options 12:44:13 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb898, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x10c8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58300b, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 3 (fault-call:1 fault-nth:73): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_SET_PDEATHSIG(0x1, 0x2f) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L-', 0x5}, 0x16, 0x3) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x440240) ioctl$EVIOCGABS2F(r4, 0x8018456f, &(0x7f0000000080)=""/210) 12:44:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000340)="00000000000000000000000091b73ef4b8d944a9be6aeaa0d6c47e6c01004000a50900000000000000508a0235fe1cf91cfb885f2e7603f77f11a3cae5f0a7bbc19a6efada", 0x45, 0x4e0}, {&(0x7f00000003c0)="83edf97636ecbca9def81b67ceb708b72945127063408b9785feb12e5303b645aaaa81f25adb9430b45df2ea71af59f8f07ba3b3f74a82287a838030b5228e6be2429a32576282abe6b38f935bb3dba551cb10851efa57b0825c11d94c5c860ac4a4ab7c9ad210fe", 0x68, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x47ff}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) 12:44:13 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb8fb, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5830be, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x1100, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xbcdd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 491.171626][T25924] FAULT_INJECTION: forcing a failure. [ 491.171626][T25924] name failslab, interval 1, probability 0, space 0, times 0 [ 491.189394][T25925] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a000c018, mo2=0002] [ 491.208584][T25925] System zones: 0-11 12:44:13 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d583105, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 491.221665][T25925] EXT4-fs error (device loop4): ext4_quota_enable:5998: comm syz-executor.4: inode #1996090755: comm syz-executor.4: iget: illegal inode # [ 491.231723][T25924] CPU: 1 PID: 25924 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 491.246039][T25924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.247542][T25925] EXT4-fs error (device loop4): ext4_quota_enable:6000: comm syz-executor.4: Bad quota inode # 1996090755 [ 491.256077][T25924] Call Trace: 12:44:13 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xbd79, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xbe30, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 491.256093][T25924] dump_stack+0x1dd/0x24e [ 491.256102][T25924] ? devkmsg_release+0x11c/0x11c [ 491.256111][T25924] ? show_regs_print_info+0x12/0x12 [ 491.256122][T25924] should_fail+0x6fb/0x860 [ 491.256135][T25924] ? setup_fault_attr+0x3d0/0x3d0 [ 491.273469][T25925] EXT4-fs warning (device loop4): ext4_enable_quotas:6040: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 491.274953][T25924] ? __ip6_append_data+0x285e/0x3a90 [ 491.274984][T25924] should_failslab+0x5/0x20 12:44:13 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc02c, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc0df, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 491.280918][T25925] EXT4-fs (loop4): mount failed [ 491.285063][T25924] __kmalloc_track_caller+0x5d/0x2c0 [ 491.285072][T25924] ? kmem_cache_alloc+0x1e0/0x270 [ 491.285085][T25924] ? __ip6_append_data+0x285e/0x3a90 [ 491.338514][T25924] __alloc_skb+0xd1/0x4d0 [ 491.342827][T25924] ? skb_put+0x114/0x1e0 [ 491.347064][T25924] __ip6_append_data+0x285e/0x3a90 [ 491.352169][T25924] ? __ip6_append_data+0x2231/0x3a90 [ 491.357437][T25924] ? ip6_setup_cork+0x1470/0x1470 [ 491.362432][T25924] ? ip6_append_data+0x2c0/0x2c0 [ 491.367337][T25924] ? lock_sock_nested+0x27a/0x310 [ 491.372329][T25924] ? xfrm_lookup_route+0x5f/0x170 [ 491.377320][T25924] ip6_append_data+0x1ad/0x2c0 [ 491.382055][T25924] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 491.387305][T25924] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 491.392554][T25924] rawv6_sendmsg+0x1b00/0x2cf0 [ 491.397325][T25924] ? compat_rawv6_ioctl+0x10/0x10 [ 491.402318][T25924] ? selinux_socket_sendmsg+0x11f/0x340 [ 491.407831][T25924] ? memset+0x1f/0x40 [ 491.411780][T25924] ? inet_send_prepare+0x1b7/0x470 [ 491.416859][T25924] ? inet_send_prepare+0x470/0x470 [ 491.421977][T25924] __sys_sendto+0x4f6/0x6c0 [ 491.426457][T25924] ? __ia32_sys_getpeername+0x80/0x80 [ 491.431809][T25924] ? vfs_write+0x427/0x4f0 [ 491.436192][T25924] ? debug_smp_processor_id+0x20/0x20 [ 491.441572][T25924] ? __ia32_sys_read+0x80/0x80 [ 491.446301][T25924] __x64_sys_sendto+0xda/0xf0 [ 491.450946][T25924] do_syscall_64+0xcb/0x150 [ 491.455433][T25924] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 491.461339][T25924] RIP: 0033:0x45e149 [ 491.465251][T25924] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 491.484821][T25924] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 491.493197][T25924] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 491.501176][T25924] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 491.509114][T25924] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c 12:44:13 executing program 3 (fault-call:1 fault-nth:74): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 491.517053][T25924] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000049 [ 491.524990][T25924] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 491.580262][T25955] FAULT_INJECTION: forcing a failure. [ 491.580262][T25955] name failslab, interval 1, probability 0, space 0, times 0 [ 491.604373][T25955] CPU: 1 PID: 25955 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 491.614530][T25955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.624572][T25955] Call Trace: [ 491.627858][T25955] dump_stack+0x1dd/0x24e [ 491.632180][T25955] ? devkmsg_release+0x11c/0x11c [ 491.637106][T25955] ? show_regs_print_info+0x12/0x12 [ 491.642298][T25955] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 491.648357][T25955] should_fail+0x6fb/0x860 [ 491.652763][T25955] ? setup_fault_attr+0x3d0/0x3d0 [ 491.657776][T25955] ? __alloc_skb+0x88/0x4d0 [ 491.662268][T25955] should_failslab+0x5/0x20 [ 491.666763][T25955] kmem_cache_alloc+0x36/0x270 [ 491.671517][T25955] __alloc_skb+0x88/0x4d0 [ 491.675835][T25955] ? skb_put+0x114/0x1e0 12:44:13 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x150d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc275, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d583258, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000340)="00000000000000000000000091b73ef4b8d944a9be6aeaa0d6c47e6c01004000a50900000000000000508a0235fe1cf91cfb885f2e7603f77f11a3cae5f0a7bbc19a6efada", 0x45, 0x4e0}, {&(0x7f00000003c0)="83edf97636ecbca9def81b67ceb708b72945127063408b9785feb12e5303b645aaaa81f25adb9430b45df2ea71af59f8f07ba3b3f74a82287a838030b5228e6be2429a32576282abe6b38f935bb3dba551cb10851efa57b0825c11d94c5c860ac4a4ab7c9ad210fe", 0x68, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x47ff}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) 12:44:13 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) accept4$unix(r4, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@deltaction={0x14, 0x31, 0x2, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x800) write(r1, &(0x7f00000001c0), 0xffffff0f) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x80, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0xfe, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xff, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0xf74dd50681fc71e0, 0x0, 0x0, 0x84}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x78, 0x0, 0x4, 0x20, 0x61}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x9, [{0xc0, &(0x7f0000000580)=@string={0xc0, 0x3, "c2b9beacb1c2f440e78670b216842a64eeddab7a8bd792f30e2fa0315e070074def85b253cd05965e31cf2e1c17f455127e0269c8c43dba5690042feb31e6972e3ea9c4a02d829934533cc643eeb9f9a7b5db15eaf6538e874d01293b5c062cadc39d9861cca74ec1613e1ae18205f07c0bc69b5f3bf7ea6ab16cbc08fcbaaf1b74040bd0811ecc7081a6a444f00d030905bcdf1d9f46ad4f2875c76e015b2df00cedd61736dbf327de3fcff3f6250951cc457e8e44ec5cd60ef68bcd447"}}, {0xde, &(0x7f0000000480)=@string={0xde, 0x3, "e549714fef2fd02f6a9121323e064db1a581db7019b884128cbb42eb0f27f5acf335e2afdf76a4c77e7b8ea25fd01533a9b77053bd8046f25a95e02ffb69dc48c778875d94d6b11b623f14afc5a8f6e2673fdda9d02053aa86d5913872b4d9f5b1c68ee3d548b169c77100620831040dd2a7c8ad554e669242792b49e3bc73a9457805362bcc372a0766efda62497c07d1eea31561fd219d0fb180130e49395acb94c2d7634e44cc8f0b638071305f673ebd7cff492e5213c0fb73c18223c41dea9c5484f0ca3558363438e56ad245f817c57c42a9de0313195cb41c"}}, {0x100, &(0x7f0000000b40)=@string={0x100, 0x3, "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"}}, {0x8f, &(0x7f0000000140)=@string={0x8f, 0x3, "961a85197169fa4d9a43e55cf59c705cb9a10c2f6a215a72e9b1290a342a3ca512c52fa4d8777c36bcf5e8f6e69478612b5b563bc4ee927aa01527686e4dc0437fbdba49e57d3b9e5fc6ff399c42eb486cd5b352403980134bd7fbc2230edf35f987eaa9316933fe345f13e7475c17fcea35645e53f9884b44bebc04805d0c37bcfc2ef962cb78ea8e0765cb11"}}, {0xf6, &(0x7f0000000340)=@string={0xf6, 0x3, "d6407de9732615585712aa83ba68f150835eabb679b24ea21c61aba764e0452aff68a907062b3d457c775d8b22f623f9fa9b3eef6f139389947d30197722ab688b32b87099b37d93adef5d0d494cd185014058d3460237f29c991373443d4394d58a357413e39e91e1ed5b573abae3340c50f4e2226d8b2733884023c274b8b7b794caf27c0997d49eb0f0b774d4abfe6d9b3acea2cca3491868c7b02986d365d9f0a04b38ff598112d2933b18692b61b48c6ffdd4fc4de50e3f2dea906a2282d0d4a69a9ac8d7c39bf2df456aac49a82b786c891cab7ae1416b93f778db3d2d8eff7b98075c2cf6a72af3db44b4ec634194441c"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x443}}, {0x7b, &(0x7f00000000c0)=@string={0x7b, 0x3, "6457e157503792efcffd0173a1f136c6f41cd3315c52a7fe20cce9377af57330d2c0945d3fc29ef6d9a73859aa1c8be6c1fa1a28d23e5c7c6834a59b6cf6b2caa3e0e97729c7ba1a2c26483a9ae5601932b9cf5ffc5d9b084efbe688f609b1b52917c752d3ebefe6d2aa3638284a51a7fc6065487c174e76e6"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x42a}}]}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000440)=0x1) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000a00)={&(0x7f0000000980)=""/104, 0x68, 0x10001}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:13 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc3c8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x15ac, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc55d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58353c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 491.680088][T25955] __ip6_append_data+0x285e/0x3a90 [ 491.685194][T25955] ? __ip6_append_data+0x2231/0x3a90 [ 491.690472][T25955] ? ip6_setup_cork+0x1470/0x1470 [ 491.695490][T25955] ? ip6_append_data+0x2c0/0x2c0 [ 491.700413][T25955] ? lock_sock_nested+0x27a/0x310 [ 491.705427][T25955] ? xfrm_lookup_route+0x5f/0x170 [ 491.710442][T25955] ip6_append_data+0x1ad/0x2c0 [ 491.715194][T25955] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 491.720594][T25955] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 491.725866][T25955] rawv6_sendmsg+0x1b00/0x2cf0 12:44:13 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc805, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 491.730626][T25955] ? compat_rawv6_ioctl+0x10/0x10 [ 491.735641][T25955] ? selinux_socket_sendmsg+0x11f/0x340 [ 491.741180][T25955] ? memset+0x1f/0x40 [ 491.745151][T25955] ? inet_send_prepare+0x1b7/0x470 [ 491.750252][T25955] ? inet_send_prepare+0x470/0x470 [ 491.755350][T25955] __sys_sendto+0x4f6/0x6c0 [ 491.759843][T25955] ? __ia32_sys_getpeername+0x80/0x80 [ 491.765219][T25955] ? vfs_write+0x427/0x4f0 [ 491.769624][T25955] ? debug_smp_processor_id+0x20/0x20 [ 491.774989][T25955] ? __ia32_sys_read+0x80/0x80 [ 491.779746][T25955] __x64_sys_sendto+0xda/0xf0 [ 491.784406][T25955] do_syscall_64+0xcb/0x150 [ 491.788886][T25955] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 491.794756][T25955] RIP: 0033:0x45e149 [ 491.798621][T25955] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 491.818198][T25955] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 12:44:13 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5835ef, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 491.826577][T25955] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 491.834518][T25955] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 491.842460][T25955] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 491.850401][T25955] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000004a [ 491.858353][T25955] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:13 executing program 3 (fault-call:1 fault-nth:75): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc80d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58369d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:13 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x1660, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 491.888132][T25980] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a000c018, mo2=0002] [ 491.909844][T25980] System zones: 0-11 [ 491.916796][T25980] EXT4-fs error (device loop4): ext4_quota_enable:5998: comm syz-executor.4: inode #1996090755: comm syz-executor.4: iget: illegal inode # [ 491.920878][T25995] FAULT_INJECTION: forcing a failure. [ 491.920878][T25995] name failslab, interval 1, probability 0, space 0, times 0 [ 491.945685][T25995] CPU: 1 PID: 25995 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 491.955919][T25995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.956712][T25980] EXT4-fs error (device loop4): ext4_quota_enable:6000: comm syz-executor.4: Bad quota inode # 1996090755 [ 491.965964][T25995] Call Trace: [ 491.965980][T25995] dump_stack+0x1dd/0x24e [ 491.965989][T25995] ? devkmsg_release+0x11c/0x11c [ 491.966001][T25995] ? show_regs_print_info+0x12/0x12 [ 491.977516][T25980] EXT4-fs warning (device loop4): ext4_enable_quotas:6040: Failed to enable quota tracking (type=0, err=-117). Please run e2fsck to fix. [ 491.980618][T25995] should_fail+0x6fb/0x860 [ 491.980630][T25995] ? setup_fault_attr+0x3d0/0x3d0 [ 491.985099][T25980] EXT4-fs (loop4): mount failed [ 491.989839][T25995] ? __ip6_append_data+0x285e/0x3a90 [ 491.989848][T25995] should_failslab+0x5/0x20 [ 491.989859][T25995] __kmalloc_track_caller+0x5d/0x2c0 [ 491.989870][T25995] ? kmem_cache_alloc+0x1e0/0x270 [ 492.043614][T25995] ? __ip6_append_data+0x285e/0x3a90 [ 492.048880][T25995] __alloc_skb+0xd1/0x4d0 [ 492.053177][T25995] ? skb_put+0x114/0x1e0 [ 492.057388][T25995] __ip6_append_data+0x285e/0x3a90 [ 492.062472][T25995] ? __ip6_append_data+0x2231/0x3a90 [ 492.067726][T25995] ? ip6_setup_cork+0x1470/0x1470 [ 492.072716][T25995] ? ip6_append_data+0x2c0/0x2c0 [ 492.077633][T25995] ? lock_sock_nested+0x27a/0x310 [ 492.082634][T25995] ? xfrm_lookup_route+0x5f/0x170 [ 492.087637][T25995] ip6_append_data+0x1ad/0x2c0 [ 492.092381][T25995] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 492.097642][T25995] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 492.102903][T25995] rawv6_sendmsg+0x1b00/0x2cf0 [ 492.107646][T25995] ? compat_rawv6_ioctl+0x10/0x10 [ 492.112646][T25995] ? selinux_socket_sendmsg+0x11f/0x340 [ 492.118210][T25995] ? memset+0x1f/0x40 [ 492.122162][T25995] ? inet_send_prepare+0x1b7/0x470 [ 492.127241][T25995] ? inet_send_prepare+0x470/0x470 [ 492.132318][T25995] __sys_sendto+0x4f6/0x6c0 [ 492.136792][T25995] ? __ia32_sys_getpeername+0x80/0x80 [ 492.142133][T25995] ? vfs_write+0x427/0x4f0 [ 492.146521][T25995] ? debug_smp_processor_id+0x20/0x20 [ 492.151862][T25995] ? __ia32_sys_read+0x80/0x80 [ 492.156596][T25995] __x64_sys_sendto+0xda/0xf0 [ 492.161246][T25995] do_syscall_64+0xcb/0x150 [ 492.165718][T25995] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 492.171583][T25995] RIP: 0033:0x45e149 [ 492.175450][T25995] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 492.195018][T25995] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 492.203395][T25995] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 492.211334][T25995] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 492.219272][T25995] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 492.227212][T25995] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000004b 12:44:14 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') recvmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, &(0x7f0000001340)=""/249, 0xf9}, 0x40002102) open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x10) mount$9p_tcp(&(0x7f0000001440)='127.0.0.1\x00', &(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)='9p\x00', 0x239022, &(0x7f0000001500)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@version_L='version=9p2000.L'}, {@privport='privport'}, {@cache_loose='cache=loose'}, {@access_user='access=user'}], [{@dont_appraise='dont_appraise'}]}}) open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) fcntl$setflags(r0, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001580)='/dev/bsg\x00', 0x400000, 0x0) timerfd_create(0x0, 0x80800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000015c0)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) [ 492.235163][T25995] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 492.289464][T26000] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 492.308029][T26000] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 492.395413][ T1241] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 492.635283][ T1241] usb 3-1: Invalid ep0 maxpacket: 512 [ 492.785316][ T1241] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 493.025249][ T1241] usb 3-1: Invalid ep0 maxpacket: 512 [ 493.030685][ T1241] usb usb3-port1: attempt power cycle [ 493.745139][ T1241] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 493.835194][ T1241] usb 3-1: Invalid ep0 maxpacket: 512 [ 493.985089][ T1241] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 494.075252][ T1241] usb 3-1: Invalid ep0 maxpacket: 512 [ 494.080693][ T1241] usb usb3-port1: unable to enumerate USB device 12:44:16 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) accept4$unix(r4, 0x0, 0x0, 0x80000) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) 12:44:16 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5837f0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:16 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc810, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:16 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x185f, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:16 executing program 3 (fault-call:1 fault-nth:76): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:16 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d5838a2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:16 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc8c3, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:16 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x1aa5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:16 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5838a2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 494.697842][T26014] FAULT_INJECTION: forcing a failure. [ 494.697842][T26014] name failslab, interval 1, probability 0, space 0, times 0 12:44:16 executing program 4 (fault-call:2 fault-nth:0): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x0) 12:44:16 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc960, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 494.738956][T26014] CPU: 1 PID: 26014 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 494.749127][T26014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.759171][T26014] Call Trace: [ 494.762455][T26014] dump_stack+0x1dd/0x24e [ 494.766778][T26014] ? devkmsg_release+0x11c/0x11c [ 494.771711][T26014] ? show_regs_print_info+0x12/0x12 [ 494.776898][T26014] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 494.782943][T26014] should_fail+0x6fb/0x860 [ 494.787335][T26014] ? setup_fault_attr+0x3d0/0x3d0 [ 494.792345][T26014] ? __alloc_skb+0x88/0x4d0 [ 494.796818][T26014] should_failslab+0x5/0x20 [ 494.801295][T26014] kmem_cache_alloc+0x36/0x270 [ 494.806028][T26014] __alloc_skb+0x88/0x4d0 [ 494.810328][T26014] ? skb_put+0x114/0x1e0 [ 494.814543][T26014] __ip6_append_data+0x285e/0x3a90 [ 494.819626][T26014] ? __ip6_append_data+0x2231/0x3a90 [ 494.824883][T26014] ? ip6_setup_cork+0x1470/0x1470 [ 494.829880][T26014] ? ip6_append_data+0x2c0/0x2c0 [ 494.834893][T26014] ? lock_sock_nested+0x27a/0x310 [ 494.839890][T26014] ? xfrm_lookup_route+0x5f/0x170 [ 494.844889][T26014] ip6_append_data+0x1ad/0x2c0 [ 494.849624][T26014] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 494.854877][T26014] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 494.860134][T26014] rawv6_sendmsg+0x1b00/0x2cf0 [ 494.864874][T26014] ? compat_rawv6_ioctl+0x10/0x10 [ 494.869907][T26014] ? selinux_socket_sendmsg+0x11f/0x340 [ 494.875431][T26014] ? memset+0x1f/0x40 [ 494.879388][T26014] ? inet_send_prepare+0x1b7/0x470 [ 494.884468][T26014] ? inet_send_prepare+0x470/0x470 [ 494.889548][T26014] __sys_sendto+0x4f6/0x6c0 [ 494.894020][T26014] ? __ia32_sys_getpeername+0x80/0x80 [ 494.899365][T26014] ? vfs_write+0x427/0x4f0 [ 494.903756][T26014] ? debug_smp_processor_id+0x20/0x20 [ 494.909097][T26014] ? __ia32_sys_read+0x80/0x80 [ 494.913829][T26014] __x64_sys_sendto+0xda/0xf0 [ 494.918477][T26014] do_syscall_64+0xcb/0x150 [ 494.922953][T26014] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 494.928814][T26014] RIP: 0033:0x45e149 [ 494.932679][T26014] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 494.952359][T26014] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 494.960742][T26014] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 494.968686][T26014] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 494.976631][T26014] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c 12:44:17 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d583a00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 494.984574][T26014] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000004c [ 494.992519][T26014] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 495.017267][T26033] FAULT_INJECTION: forcing a failure. [ 495.017267][T26033] name failslab, interval 1, probability 0, space 0, times 0 [ 495.044189][T26033] CPU: 1 PID: 26033 Comm: syz-executor.4 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 495.054346][T26033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.064391][T26033] Call Trace: [ 495.067672][T26033] dump_stack+0x1dd/0x24e [ 495.071989][T26033] ? devkmsg_release+0x11c/0x11c [ 495.076914][T26033] ? show_regs_print_info+0x12/0x12 [ 495.082100][T26033] should_fail+0x6fb/0x860 [ 495.086505][T26033] ? setup_fault_attr+0x3d0/0x3d0 [ 495.091516][T26033] ? __kernel_write+0x340/0x340 [ 495.096353][T26033] ? check_preemption_disabled+0x9e/0x330 [ 495.102053][T26033] ? getname_flags+0xb8/0x610 [ 495.106719][T26033] should_failslab+0x5/0x20 [ 495.106940][T26028] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 495.111211][T26033] kmem_cache_alloc+0x36/0x270 [ 495.111224][T26033] ? __fsnotify_parent+0x310/0x310 [ 495.129880][T26033] getname_flags+0xb8/0x610 [ 495.134377][T26033] user_path_at_empty+0x28/0x50 [ 495.139217][T26033] path_setxattr+0xad/0x240 [ 495.143699][T26033] ? fput_many+0x42/0x1a0 [ 495.147998][T26033] ? check_preemption_disabled+0x15a/0x330 [ 495.153770][T26033] ? simple_xattr_list_add+0xf0/0xf0 [ 495.159023][T26033] ? __ia32_sys_read+0x80/0x80 [ 495.163754][T26033] __x64_sys_setxattr+0xb7/0xd0 [ 495.168626][T26033] do_syscall_64+0xcb/0x150 [ 495.173099][T26033] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 495.179009][T26033] RIP: 0033:0x45e149 [ 495.182872][T26033] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 495.202566][T26033] RSP: 002b:00007f0c4f55bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 495.210992][T26033] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045e149 [ 495.218937][T26033] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 495.226916][T26033] RBP: 00007f0c4f55bca0 R08: 0000000000000000 R09: 0000000000000000 [ 495.234857][T26033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.242795][T26033] R13: 00007fffc04e570f R14: 00007f0c4f55c9c0 R15: 000000000119c034 12:44:17 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x5) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x1c200, 0x0) fsetxattr$security_ima(r0, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000340)=@md5={0x1, "9820497fb0c99c0ac38bb088e0bcbe41"}, 0x11, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xffffffff, 0x3, 0x2, 0x1}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) r5 = dup2(r3, r2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fcntl$dupfd(r2, 0x0, r7) write(r1, &(0x7f00000001c0), 0xffffff0f) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000380)=r7) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r8 = syz_open_dev$vcsu(&(0x7f00000003c0)='/dev/vcsu#\x00', 0x0, 0x204000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r8, &(0x7f0000000400)="79c563543a0ee7e3a5d38c062b55d3f0a69bedd0559ec1a0ecab7a61294444e0b064d56603d916d3ca61bad76fb5b4e8a042132b520f07c97cd8ec9e1162093ef52457fbe2ced121173aaad153214940b38fd954a77e1a722c22c2e85fbac1447c36d1b03134c46f31f94204c48d067cbd2efaae069d851ddc296c7268d221fc7768262b01d1913dab419d7b03b8420d3548305d14e3477c057f1934527ef22fbdbf4145b4f5f849aa76752eace5f8af0e2e7b", &(0x7f00000004c0)=""/207}, 0x20) 12:44:17 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x1bf8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:17 executing program 3 (fault-call:1 fault-nth:77): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:17 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xcd41, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:17 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d583c00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:17 executing program 4 (fault-call:2 fault-nth:1): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x0) 12:44:17 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xcda5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:17 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x1d90, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 495.543109][T26046] FAULT_INJECTION: forcing a failure. [ 495.543109][T26046] name failslab, interval 1, probability 0, space 0, times 0 [ 495.566158][T26044] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 495.575034][T26046] CPU: 0 PID: 26046 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 12:44:17 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xcdf4, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:17 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xcef8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 495.575039][T26046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.575047][T26046] Call Trace: [ 495.598480][T26046] dump_stack+0x1dd/0x24e [ 495.601868][T26044] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 495.602804][T26046] ? devkmsg_release+0x11c/0x11c [ 495.602818][T26046] ? show_regs_print_info+0x12/0x12 [ 495.623940][T26044] __quota_error: 16 callbacks suppressed [ 495.623946][T26044] Quota error (device loop4): write_blk: dquota write failed 12:44:17 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd0a7, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 495.627110][T26046] should_fail+0x6fb/0x860 [ 495.627119][T26046] ? setup_fault_attr+0x3d0/0x3d0 [ 495.627130][T26046] ? __ip6_append_data+0x285e/0x3a90 [ 495.627144][T26046] should_failslab+0x5/0x20 [ 495.637237][T26044] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 495.640096][T26046] __kmalloc_track_caller+0x5d/0x2c0 [ 495.640105][T26046] ? kmem_cache_alloc+0x1e0/0x270 [ 495.640119][T26046] ? __ip6_append_data+0x285e/0x3a90 [ 495.647336][T26062] FAULT_INJECTION: forcing a failure. 12:44:17 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd33d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 495.647336][T26062] name failslab, interval 1, probability 0, space 0, times 0 [ 495.649507][T26046] __alloc_skb+0xd1/0x4d0 [ 495.649515][T26046] ? skb_put+0x114/0x1e0 [ 495.649529][T26046] __ip6_append_data+0x285e/0x3a90 [ 495.711654][T26046] ? __ip6_append_data+0x2231/0x3a90 [ 495.716927][T26046] ? ip6_setup_cork+0x1470/0x1470 [ 495.721944][T26046] ? ip6_append_data+0x2c0/0x2c0 [ 495.726868][T26046] ? lock_sock_nested+0x27a/0x310 [ 495.731874][T26046] ? xfrm_lookup_route+0x5f/0x170 [ 495.736882][T26046] ip6_append_data+0x1ad/0x2c0 [ 495.741629][T26046] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 495.746895][T26046] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 495.752164][T26046] rawv6_sendmsg+0x1b00/0x2cf0 [ 495.757781][T26046] ? compat_rawv6_ioctl+0x10/0x10 [ 495.762787][T26046] ? selinux_socket_sendmsg+0x11f/0x340 [ 495.768308][T26046] ? memset+0x1f/0x40 [ 495.772266][T26046] ? inet_send_prepare+0x1b7/0x470 [ 495.777376][T26046] ? inet_send_prepare+0x470/0x470 [ 495.782462][T26046] __sys_sendto+0x4f6/0x6c0 [ 495.786949][T26046] ? __ia32_sys_getpeername+0x80/0x80 [ 495.792304][T26046] ? vfs_write+0x427/0x4f0 [ 495.796792][T26046] ? debug_smp_processor_id+0x20/0x20 [ 495.802147][T26046] ? __ia32_sys_read+0x80/0x80 [ 495.806895][T26046] __x64_sys_sendto+0xda/0xf0 [ 495.811551][T26046] do_syscall_64+0xcb/0x150 [ 495.816032][T26046] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 495.821898][T26046] RIP: 0033:0x45e149 [ 495.825767][T26046] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 495.845352][T26046] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 495.853736][T26046] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 495.861683][T26046] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 495.869649][T26046] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 495.877597][T26046] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000004d [ 495.885804][T26046] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 495.893790][T26062] CPU: 1 PID: 26062 Comm: syz-executor.4 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 495.903930][T26062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.913968][T26062] Call Trace: [ 495.917248][T26062] dump_stack+0x1dd/0x24e [ 495.921571][T26062] ? devkmsg_release+0x11c/0x11c [ 495.926496][T26062] ? show_regs_print_info+0x12/0x12 [ 495.931682][T26062] ? stack_trace_save+0x120/0x1f0 [ 495.936693][T26062] should_fail+0x6fb/0x860 [ 495.941097][T26062] ? setup_fault_attr+0x3d0/0x3d0 [ 495.946102][T26062] ? memset+0x1f/0x40 [ 495.950068][T26062] ? unwind_next_frame+0x1aa9/0x1f30 [ 495.955340][T26062] ? check_preemption_disabled+0x9e/0x330 [ 495.961045][T26062] ? getdqbuf+0x1b/0x50 [ 495.965191][T26062] should_failslab+0x5/0x20 [ 495.969674][T26062] __kmalloc+0x5f/0x2d0 [ 495.973799][T26062] ? debug_smp_processor_id+0x20/0x20 [ 495.979141][T26062] getdqbuf+0x1b/0x50 [ 495.983110][T26062] qtree_write_dquot+0xe3/0x520 [ 495.987940][T26062] ? qtree_entry_unused+0x120/0x120 [ 495.993157][T26062] ? mutex_lock+0xa6/0x110 [ 495.997542][T26062] ? mutex_trylock+0xb0/0xb0 [ 496.002101][T26062] v2_write_dquot+0x108/0x160 [ 496.006746][T26062] dquot_acquire+0x255/0x450 [ 496.011353][T26062] ? __ext4_journal_start_sb+0x3ad/0x420 [ 496.016968][T26062] ext4_acquire_dquot+0x1d5/0x280 [ 496.021984][T26062] dqget+0x9a0/0xd60 [ 496.025857][T26062] __dquot_initialize+0x3bb/0xd70 [ 496.030877][T26062] ? dquot_initialize+0x20/0x20 [ 496.035709][T26062] ? selinux_inode_setxattr+0x659/0x10b0 [ 496.041310][T26062] ? selinux_inode_getattr+0x3e0/0x3e0 [ 496.046736][T26062] ext4_xattr_set+0x108/0x330 [ 496.051428][T26062] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.057463][T26062] ? ext4_xattr_set_credits+0x290/0x290 [ 496.062977][T26062] ? ext4_xattr_security_get+0x40/0x40 [ 496.068403][T26062] __vfs_setxattr+0x3be/0x400 [ 496.073049][T26062] __vfs_setxattr_noperm+0x12a/0x3e0 [ 496.078303][T26062] vfs_setxattr+0x11e/0x2d0 [ 496.082775][T26062] ? xattr_permission+0x350/0x350 [ 496.087771][T26062] ? strncpy_from_user+0x20c/0x370 [ 496.092849][T26062] setxattr+0x1e2/0x410 [ 496.096972][T26062] ? path_setxattr+0x240/0x240 [ 496.101709][T26062] ? preempt_count_add+0x66/0x150 [ 496.106709][T26062] ? __mnt_want_write+0x1f5/0x270 [ 496.111705][T26062] path_setxattr+0x164/0x240 [ 496.116270][T26062] ? fput_many+0x42/0x1a0 [ 496.120624][T26062] ? simple_xattr_list_add+0xf0/0xf0 [ 496.125881][T26062] ? __ia32_sys_read+0x80/0x80 [ 496.130617][T26062] __x64_sys_setxattr+0xb7/0xd0 [ 496.135574][T26062] do_syscall_64+0xcb/0x150 [ 496.140050][T26062] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.145910][T26062] RIP: 0033:0x45e149 [ 496.149774][T26062] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 496.169347][T26062] RSP: 002b:00007f0c4f55bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 496.177725][T26062] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 496.185686][T26062] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 496.193627][T26062] RBP: 00007f0c4f55bca0 R08: 0000000000000000 R09: 0000000000000000 [ 496.201655][T26062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.209599][T26062] R13: 00007fffc04e570f R14: 00007f0c4f55c9c0 R15: 000000000119c034 [ 496.219088][T26062] VFS: Not enough memory for quota buffers. 12:44:18 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/llc/socket\x00') ioctl$CHAR_RAW_ROTATIONAL(r2, 0x127e, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(r0, &(0x7f00000001c0), 0xffffff0f) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000140)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000200)=&(0x7f00000001c0)) read(0xffffffffffffffff, &(0x7f0000000040)=""/253, 0xfd) 12:44:18 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd490, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:18 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d583c35, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:18 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2002, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:18 executing program 3 (fault-call:1 fault-nth:78): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:18 executing program 4 (fault-call:2 fault-nth:2): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x0) 12:44:18 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x203d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:18 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd525, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:18 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d583d20, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 496.385280][T26081] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 496.393184][T26089] FAULT_INJECTION: forcing a failure. [ 496.393184][T26089] name failslab, interval 1, probability 0, space 0, times 0 [ 496.400043][T26081] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 496.421281][T26081] Quota error (device loop4): write_blk: dquota write failed [ 496.429049][T26081] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 496.445670][T26081] FAULT_INJECTION: forcing a failure. [ 496.445670][T26081] name failslab, interval 1, probability 0, space 0, times 0 [ 496.458859][T26089] CPU: 1 PID: 26089 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 496.469004][T26089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.479047][T26089] Call Trace: [ 496.482318][T26089] dump_stack+0x1dd/0x24e [ 496.486629][T26089] ? devkmsg_release+0x11c/0x11c [ 496.491544][T26089] ? show_regs_print_info+0x12/0x12 [ 496.496720][T26089] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 496.502760][T26089] should_fail+0x6fb/0x860 [ 496.507171][T26089] ? setup_fault_attr+0x3d0/0x3d0 [ 496.512172][T26089] ? __alloc_skb+0x88/0x4d0 [ 496.516650][T26089] should_failslab+0x5/0x20 [ 496.521126][T26089] kmem_cache_alloc+0x36/0x270 [ 496.525862][T26089] __alloc_skb+0x88/0x4d0 [ 496.530252][T26089] ? skb_put+0x114/0x1e0 [ 496.534495][T26089] __ip6_append_data+0x285e/0x3a90 [ 496.539581][T26089] ? __ip6_append_data+0x2231/0x3a90 [ 496.544852][T26089] ? ip6_setup_cork+0x1470/0x1470 [ 496.549868][T26089] ? ip6_append_data+0x2c0/0x2c0 [ 496.554784][T26089] ? lock_sock_nested+0x27a/0x310 [ 496.559779][T26089] ? xfrm_lookup_route+0x5f/0x170 [ 496.564782][T26089] ip6_append_data+0x1ad/0x2c0 [ 496.569550][T26089] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 496.574813][T26089] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 496.580072][T26089] rawv6_sendmsg+0x1b00/0x2cf0 [ 496.584815][T26089] ? compat_rawv6_ioctl+0x10/0x10 [ 496.589818][T26089] ? selinux_socket_sendmsg+0x11f/0x340 [ 496.595343][T26089] ? memset+0x1f/0x40 [ 496.599299][T26089] ? inet_send_prepare+0x1b7/0x470 [ 496.604383][T26089] ? inet_send_prepare+0x470/0x470 [ 496.609470][T26089] __sys_sendto+0x4f6/0x6c0 [ 496.613949][T26089] ? __ia32_sys_getpeername+0x80/0x80 [ 496.619297][T26089] ? vfs_write+0x427/0x4f0 [ 496.623710][T26089] ? debug_smp_processor_id+0x20/0x20 [ 496.629073][T26089] ? __ia32_sys_read+0x80/0x80 [ 496.633810][T26089] __x64_sys_sendto+0xda/0xf0 [ 496.638460][T26089] do_syscall_64+0xcb/0x150 [ 496.642941][T26089] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.648806][T26089] RIP: 0033:0x45e149 [ 496.652676][T26089] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 496.672256][T26089] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 12:44:18 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d583d88, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:18 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2043, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:18 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd5d8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 496.680639][T26089] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 496.688608][T26089] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 496.696553][T26089] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 496.705801][T26089] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000004e [ 496.713747][T26089] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 496.721707][T26081] CPU: 0 PID: 26081 Comm: syz-executor.4 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 496.731847][T26081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.741890][T26081] Call Trace: [ 496.745171][T26081] dump_stack+0x1dd/0x24e [ 496.749493][T26081] ? devkmsg_release+0x11c/0x11c [ 496.754427][T26081] ? show_regs_print_info+0x12/0x12 [ 496.759620][T26081] should_fail+0x6fb/0x860 [ 496.764032][T26081] ? setup_fault_attr+0x3d0/0x3d0 [ 496.769045][T26081] ? dqget+0x9a0/0xd60 [ 496.773107][T26081] ? __dquot_initialize+0x3bb/0xd70 [ 496.778296][T26081] ? ext4_xattr_set+0x108/0x330 [ 496.783135][T26081] ? __vfs_setxattr+0x3be/0x400 [ 496.787977][T26081] ? __vfs_setxattr_noperm+0x12a/0x3e0 [ 496.793427][T26081] ? setxattr+0x1e2/0x410 [ 496.797745][T26081] ? path_setxattr+0x164/0x240 [ 496.802498][T26081] ? __x64_sys_setxattr+0xb7/0xd0 [ 496.807510][T26081] ? do_syscall_64+0xcb/0x150 [ 496.812186][T26081] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.818256][T26081] ? getdqbuf+0x1b/0x50 [ 496.822403][T26081] should_failslab+0x5/0x20 [ 496.826978][T26081] __kmalloc+0x5f/0x2d0 [ 496.831104][T26081] getdqbuf+0x1b/0x50 [ 496.835057][T26081] do_insert_tree+0xb9/0x1c60 [ 496.839706][T26081] ? find_next_id+0x6f0/0x6f0 [ 496.844412][T26081] ? getdqbuf+0x1b/0x50 [ 496.848537][T26081] ? __kmalloc+0xe7/0x2d0 [ 496.852836][T26081] ? getdqbuf+0x1b/0x50 [ 496.856968][T26081] qtree_write_dquot+0x3a5/0x520 [ 496.861913][T26081] ? qtree_entry_unused+0x120/0x120 [ 496.867119][T26081] ? mutex_lock+0xa6/0x110 [ 496.871504][T26081] ? mutex_trylock+0xb0/0xb0 [ 496.876113][T26081] v2_write_dquot+0x108/0x160 [ 496.880759][T26081] dquot_acquire+0x255/0x450 [ 496.885318][T26081] ? __ext4_journal_start_sb+0x3ad/0x420 [ 496.890919][T26081] ext4_acquire_dquot+0x1d5/0x280 [ 496.895912][T26081] dqget+0x9a0/0xd60 [ 496.899778][T26081] __dquot_initialize+0x3bb/0xd70 [ 496.904771][T26081] ? dquot_initialize+0x20/0x20 [ 496.909596][T26081] ? selinux_inode_setxattr+0x659/0x10b0 [ 496.915197][T26081] ? selinux_inode_getattr+0x3e0/0x3e0 [ 496.920636][T26081] ext4_xattr_set+0x108/0x330 [ 496.925304][T26081] ? do_syscall_64+0xcb/0x150 [ 496.929969][T26081] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.936032][T26081] ? ext4_xattr_set_credits+0x290/0x290 [ 496.941546][T26081] ? ext4_xattr_security_get+0x40/0x40 [ 496.946981][T26081] __vfs_setxattr+0x3be/0x400 [ 496.951633][T26081] __vfs_setxattr_noperm+0x12a/0x3e0 [ 496.957026][T26081] vfs_setxattr+0x11e/0x2d0 [ 496.961500][T26081] ? xattr_permission+0x350/0x350 [ 496.966495][T26081] ? strncpy_from_user+0x20c/0x370 [ 496.971639][T26081] setxattr+0x1e2/0x410 [ 496.975815][T26081] ? path_setxattr+0x240/0x240 [ 496.980613][T26081] ? preempt_count_add+0x66/0x150 [ 496.985608][T26081] ? __mnt_want_write+0x1f5/0x270 [ 496.990649][T26081] path_setxattr+0x164/0x240 [ 496.995297][T26081] ? fput_many+0x42/0x1a0 [ 496.999604][T26081] ? simple_xattr_list_add+0xf0/0xf0 [ 497.004997][T26081] ? __ia32_sys_read+0x80/0x80 [ 497.009733][T26081] __x64_sys_setxattr+0xb7/0xd0 [ 497.014556][T26081] do_syscall_64+0xcb/0x150 [ 497.019043][T26081] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 497.024904][T26081] RIP: 0033:0x45e149 [ 497.028770][T26081] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 497.048346][T26081] RSP: 002b:00007f0c4f57cc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 497.057683][T26081] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 497.065631][T26081] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 497.073580][T26081] RBP: 00007f0c4f57cca0 R08: 0000000000000000 R09: 0000000000000000 [ 497.081738][T26081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.089679][T26081] R13: 00007fffc04e570f R14: 00007f0c4f57d9c0 R15: 000000000119bf8c [ 497.098535][T26081] VFS: Not enough memory for quota buffers. [ 497.104476][T26081] Quota error (device loop4): qtree_write_dquot: Error -12 occurred while creating quota 12:44:19 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:19 executing program 3 (fault-call:1 fault-nth:79): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:19 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x20f6, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:19 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d583dd3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:19 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd88b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:19 executing program 4 (fault-call:2 fault-nth:3): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x0) [ 497.197570][T26109] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 497.205948][T26118] FAULT_INJECTION: forcing a failure. [ 497.205948][T26118] name failslab, interval 1, probability 0, space 0, times 0 [ 497.212962][T26109] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 497.224295][T26118] CPU: 1 PID: 26118 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 12:44:19 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d583f00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 497.243525][T26118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.243732][T26109] Quota error (device loop4): write_blk: dquota write failed [ 497.253648][T26118] Call Trace: [ 497.253664][T26118] dump_stack+0x1dd/0x24e [ 497.253674][T26118] ? devkmsg_release+0x11c/0x11c [ 497.253682][T26118] ? show_regs_print_info+0x12/0x12 [ 497.253692][T26118] should_fail+0x6fb/0x860 [ 497.253704][T26118] ? setup_fault_attr+0x3d0/0x3d0 [ 497.266546][T26109] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 497.268613][T26118] ? __ip6_append_data+0x285e/0x3a90 [ 497.268621][T26118] should_failslab+0x5/0x20 [ 497.268635][T26118] __kmalloc_track_caller+0x5d/0x2c0 [ 497.273651][T26122] FAULT_INJECTION: forcing a failure. [ 497.273651][T26122] name failslab, interval 1, probability 0, space 0, times 0 [ 497.278714][T26118] ? kmem_cache_alloc+0x1e0/0x270 [ 497.278724][T26118] ? __ip6_append_data+0x285e/0x3a90 [ 497.278733][T26118] __alloc_skb+0xd1/0x4d0 [ 497.278739][T26118] ? skb_put+0x114/0x1e0 12:44:19 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d584000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 497.278752][T26118] __ip6_append_data+0x285e/0x3a90 [ 497.349384][T26118] ? __ip6_append_data+0x2231/0x3a90 [ 497.354658][T26118] ? ip6_setup_cork+0x1470/0x1470 [ 497.359662][T26118] ? ip6_append_data+0x2c0/0x2c0 [ 497.364582][T26118] ? lock_sock_nested+0x27a/0x310 [ 497.369677][T26118] ? xfrm_lookup_route+0x5f/0x170 [ 497.374681][T26118] ip6_append_data+0x1ad/0x2c0 [ 497.379423][T26118] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 497.384685][T26118] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 497.389956][T26118] rawv6_sendmsg+0x1b00/0x2cf0 12:44:19 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d584086, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 497.394717][T26118] ? compat_rawv6_ioctl+0x10/0x10 [ 497.399733][T26118] ? selinux_socket_sendmsg+0x11f/0x340 [ 497.405266][T26118] ? memset+0x1f/0x40 [ 497.409230][T26118] ? inet_send_prepare+0x1b7/0x470 [ 497.414323][T26118] ? inet_send_prepare+0x470/0x470 [ 497.419415][T26118] __sys_sendto+0x4f6/0x6c0 [ 497.423907][T26118] ? __ia32_sys_getpeername+0x80/0x80 [ 497.429281][T26118] ? vfs_write+0x427/0x4f0 [ 497.433685][T26118] ? debug_smp_processor_id+0x20/0x20 [ 497.439044][T26118] ? __ia32_sys_read+0x80/0x80 [ 497.443906][T26118] __x64_sys_sendto+0xda/0xf0 12:44:19 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5841cd, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 497.448568][T26118] do_syscall_64+0xcb/0x150 [ 497.453061][T26118] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 497.458941][T26118] RIP: 0033:0x45e149 [ 497.462828][T26118] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 497.482413][T26118] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 497.490800][T26118] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 497.498748][T26118] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 497.506696][T26118] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 497.514644][T26118] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000004f [ 497.522610][T26118] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 497.530579][T26122] CPU: 0 PID: 26122 Comm: syz-executor.4 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 12:44:19 executing program 3 (fault-call:1 fault-nth:80): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:19 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2100, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 497.540711][T26122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.550751][T26122] Call Trace: [ 497.554033][T26122] dump_stack+0x1dd/0x24e [ 497.558469][T26122] ? devkmsg_release+0x11c/0x11c [ 497.563399][T26122] ? show_regs_print_info+0x12/0x12 [ 497.568597][T26122] should_fail+0x6fb/0x860 [ 497.572216][T26136] FAULT_INJECTION: forcing a failure. [ 497.572216][T26136] name failslab, interval 1, probability 0, space 0, times 0 [ 497.573004][T26122] ? setup_fault_attr+0x3d0/0x3d0 [ 497.573012][T26122] ? ext4_acquire_dquot+0x1d5/0x280 [ 497.573026][T26122] ? __dquot_initialize+0x3bb/0xd70 [ 497.600933][T26122] ? getdqbuf+0x1b/0x50 [ 497.605097][T26122] should_failslab+0x5/0x20 [ 497.609579][T26122] __kmalloc+0x5f/0x2d0 [ 497.613806][T26122] getdqbuf+0x1b/0x50 [ 497.617796][T26122] do_insert_tree+0xb9/0x1c60 [ 497.622459][T26122] ? ext4_getblk+0x560/0x560 [ 497.627042][T26122] ? from_kuid+0x208/0x350 [ 497.631432][T26122] ? ext4_quota_read+0x1ef/0x290 [ 497.636345][T26122] ? find_next_id+0x6f0/0x6f0 [ 497.640996][T26122] ? __brelse+0x54/0x90 [ 497.645128][T26122] ? ext4_quota_read+0x24f/0x290 [ 497.650042][T26122] do_insert_tree+0x6a9/0x1c60 [ 497.654795][T26122] ? find_next_id+0x6f0/0x6f0 [ 497.659447][T26122] ? getdqbuf+0x1b/0x50 [ 497.663581][T26122] ? __kmalloc+0xe7/0x2d0 [ 497.667882][T26122] ? debug_smp_processor_id+0x20/0x20 [ 497.673226][T26122] ? getdqbuf+0x1b/0x50 [ 497.677359][T26122] qtree_write_dquot+0x3a5/0x520 [ 497.682270][T26122] ? qtree_entry_unused+0x120/0x120 [ 497.687466][T26122] ? mutex_lock+0xa6/0x110 [ 497.691861][T26122] ? mutex_trylock+0xb0/0xb0 [ 497.696425][T26122] v2_write_dquot+0x108/0x160 [ 497.701075][T26122] dquot_acquire+0x255/0x450 [ 497.705636][T26122] ? __ext4_journal_start_sb+0x3ad/0x420 [ 497.711240][T26122] ext4_acquire_dquot+0x1d5/0x280 [ 497.716237][T26122] dqget+0x9a0/0xd60 [ 497.720106][T26122] __dquot_initialize+0x3bb/0xd70 [ 497.725109][T26122] ? dquot_initialize+0x20/0x20 [ 497.729953][T26122] ? selinux_inode_setxattr+0x659/0x10b0 [ 497.735570][T26122] ? selinux_inode_getattr+0x3e0/0x3e0 [ 497.741003][T26122] ext4_xattr_set+0x108/0x330 [ 497.745657][T26122] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 497.751696][T26122] ? ext4_xattr_set_credits+0x290/0x290 [ 497.757216][T26122] ? ext4_xattr_security_get+0x40/0x40 [ 497.762649][T26122] __vfs_setxattr+0x3be/0x400 [ 497.767319][T26122] __vfs_setxattr_noperm+0x12a/0x3e0 [ 497.772579][T26122] vfs_setxattr+0x11e/0x2d0 [ 497.777055][T26122] ? xattr_permission+0x350/0x350 [ 497.782054][T26122] ? strncpy_from_user+0x20c/0x370 [ 497.787138][T26122] setxattr+0x1e2/0x410 [ 497.791354][T26122] ? path_setxattr+0x240/0x240 [ 497.796102][T26122] ? preempt_count_add+0x66/0x150 [ 497.801101][T26122] ? __mnt_want_write+0x1f5/0x270 [ 497.806097][T26122] path_setxattr+0x164/0x240 [ 497.810659][T26122] ? fput_many+0x42/0x1a0 [ 497.814962][T26122] ? simple_xattr_list_add+0xf0/0xf0 [ 497.820309][T26122] ? __ia32_sys_read+0x80/0x80 [ 497.825046][T26122] __x64_sys_setxattr+0xb7/0xd0 [ 497.829869][T26122] do_syscall_64+0xcb/0x150 [ 497.834349][T26122] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 497.840230][T26122] RIP: 0033:0x45e149 [ 497.844100][T26122] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 497.863676][T26122] RSP: 002b:00007f0c4f55bc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 497.872056][T26122] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 497.880000][T26122] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 497.888032][T26122] RBP: 00007f0c4f55bca0 R08: 0000000000000000 R09: 0000000000000000 [ 497.895980][T26122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 497.903945][T26122] R13: 00007fffc04e570f R14: 00007f0c4f55c9c0 R15: 000000000119c034 [ 497.911919][T26136] CPU: 1 PID: 26136 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 497.922060][T26136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.932100][T26136] Call Trace: [ 497.935383][T26136] dump_stack+0x1dd/0x24e [ 497.935745][T26122] VFS: Not enough memory for quota buffers. [ 497.939697][T26136] ? devkmsg_release+0x11c/0x11c [ 497.939710][T26136] ? show_regs_print_info+0x12/0x12 [ 497.945637][T26122] Quota error (device loop4): qtree_write_dquot: Error -12 occurred while creating quota [ 497.950495][T26136] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 497.950508][T26136] should_fail+0x6fb/0x860 [ 497.950521][T26136] ? setup_fault_attr+0x3d0/0x3d0 [ 497.981007][T26136] ? __alloc_skb+0x88/0x4d0 [ 497.985505][T26136] should_failslab+0x5/0x20 [ 497.989998][T26136] kmem_cache_alloc+0x36/0x270 [ 497.994746][T26136] __alloc_skb+0x88/0x4d0 [ 497.999064][T26136] ? skb_put+0x114/0x1e0 [ 498.003299][T26136] __ip6_append_data+0x285e/0x3a90 [ 498.008401][T26136] ? __ip6_append_data+0x2231/0x3a90 [ 498.013673][T26136] ? ip6_setup_cork+0x1470/0x1470 [ 498.018682][T26136] ? ip6_append_data+0x2c0/0x2c0 [ 498.023603][T26136] ? lock_sock_nested+0x27a/0x310 [ 498.028605][T26136] ? xfrm_lookup_route+0x5f/0x170 [ 498.033672][T26136] ip6_append_data+0x1ad/0x2c0 [ 498.038402][T26136] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 498.043654][T26136] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 498.048907][T26136] rawv6_sendmsg+0x1b00/0x2cf0 [ 498.053645][T26136] ? compat_rawv6_ioctl+0x10/0x10 [ 498.058642][T26136] ? selinux_socket_sendmsg+0x11f/0x340 [ 498.064158][T26136] ? memset+0x1f/0x40 [ 498.068154][T26136] ? inet_send_prepare+0x1b7/0x470 [ 498.073270][T26136] ? inet_send_prepare+0x470/0x470 [ 498.078346][T26136] __sys_sendto+0x4f6/0x6c0 [ 498.082820][T26136] ? __ia32_sys_getpeername+0x80/0x80 [ 498.088161][T26136] ? vfs_write+0x427/0x4f0 [ 498.092573][T26136] ? debug_smp_processor_id+0x20/0x20 [ 498.097910][T26136] ? __ia32_sys_read+0x80/0x80 [ 498.102641][T26136] __x64_sys_sendto+0xda/0xf0 [ 498.107288][T26136] do_syscall_64+0xcb/0x150 [ 498.111766][T26136] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 498.117640][T26136] RIP: 0033:0x45e149 [ 498.121541][T26136] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 498.141119][T26136] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 498.149502][T26136] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 498.157488][T26136] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 498.165428][T26136] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 498.173409][T26136] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000050 [ 498.181350][T26136] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff0f) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) 12:44:20 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd8d5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:20 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2190, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:20 executing program 4 (fault-call:2 fault-nth:4): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x0) 12:44:20 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d584320, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:20 executing program 3 (fault-call:1 fault-nth:81): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:20 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xda28, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:20 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2574, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:20 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) r5 = fcntl$dupfd(r3, 0x406, r0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000480)='/dev/bsg\x00', 0x4000, 0x0) r7 = dup(r1) r8 = eventfd(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) accept4$unix(r9, 0x0, 0x0, 0x80000) io_submit(0x0, 0x9, &(0x7f0000000a80)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0xfffe, r0, &(0x7f0000000040)="eb93614b1dea6841a7a7ed94628750313676037fc8d394c1394743bc52811b6616230431b8ea105cf0cdd440f588c6f0b12e436e947b04b550184a4b0a7f36acfe9367442aa38cefa65452355b9b3af6714ce4e1750b936cd044e339a4920c10fa64dd0c7d8f84c5f70215ac03e035f52f6be6fb1d0289e44d15f5f0432b99e6c17a82c28a9f2d488e9de624e27164b5b69f72ec", 0x94, 0xffffffff}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000300)="2c3c0e9b8d44b90e03cf01d67db3e31569ec27da69b509374d58267daf3d2fbb2b536e97879663c7c7e9599ca564d67cea5a4708b6d340fde3873132fe1102d7e0e3b0", 0x43, 0x3, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x3, 0x8, r4, &(0x7f00000003c0)="33ed471fc70a280f33e4977a3b40ace8eba076ba157a31debd94b88aa31aa1b12b42eef926de7de4051cef2b7542e337c41ebc9c8e0ea276297ad7f32a4ae464d95179d1cdb7a8c11a124a751ba16b755a74bdd7", 0x54, 0x1769, 0x0, 0x2, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x4, r6, &(0x7f00000004c0)="d00a4074205a863ee7ccdc3a51010a609e7feec1347ec2ae885b24b212a5dc01e9840abf7204252df537596bf95bc5ce32969b550ef20561e5969eed700ad64a55dea79d59dcdc6861753e26985f3dc3e61c1ca068c468eb3898d9b91301fe2249b2ace27cff43efd1d1897284842ffacc2c5099d82813cf995ed89fef2ec540c49d80c6b7e276f2ec66ac81ad154039e85be80768e1d57c7062cb96ceb0c5e8687c0bb1b69885a36e84d9a9121bc5a0d7ddd48ca2045f85b2ce95287ab104cde1e5471bf415b1cd26db4eb1b7d76ae412cf2f0a8ba554e3a688", 0xda, 0x240000000000, 0x0, 0x1, r3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0xffff, r0, &(0x7f0000000600)="b99b8d67f74140c478c786d374f849dd0b61e98692e020f5d76dc2e9aabab766f70ecbaed79d4c2c29cfac344d7aa4f6d9956c805c310e509c12278b050fd368fc1f90d9f653e8ad", 0x48, 0x4}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0xcca, 0xffffffffffffffff, &(0x7f00000006c0)="de847200eeb79555880b376561b4dab71fbd217843c6b04d705e78215e5c04f8334859da4fa7ba68f9e0e210e3b0b91622458e02466dfe2dee40e33487e2ae3506365a68c83743af3c4195a96b189600b2d59fae1dd1ba321369e137886447b2351db03e5d97e859190b9712b503190211", 0x71, 0x8001, 0x0, 0x3, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x3, 0x1ff, r1, &(0x7f0000000780)="914225a49ec94157a12ba10af71dab5fa2344b954f4b2a9a257b745191147b536409dbf4e4fa0dc7becd2f77e90ce4eca883e1dfc500ac25203a7304702b79eb388235840dc37842e8778d107347d4cf4fe445ff488d44e6cbeeb29baf3d35ebd25bf0a133fa5c1369a8fa640c21ea6c744dbb44ea16af9c32aaa9362dabb7fab2", 0x81, 0x5, 0x0, 0x2, r8}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x4, r0, &(0x7f0000000880)="b03a63df5c17fa1300f5c47080a6433fb64264ad63d8fe20db49ec4a9c3536d788df4b5cb035c9d0e5883b3506c2c7516e1bfff3a9649473508cf1025825f76cf3ff42d0a26e4b17059bd9c64b8e489261a64cecb6fc6a", 0x57, 0xff6}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x6, 0xca, r2, &(0x7f0000000940)="db692edaa079f5d4f1a2a12405fca1d2cec7e8365fba8953752a85ddecaf9b839684277ea1d39424e4b27e822ca0fe92712d7847ae4b9497ed3b325599715cce66b06fd91c6c0b77efa08355aaaa7aeb0c891e871a70df2fa98e0e9ed3fa78a2469d839d575612a1b5ac0512a556be85ae4e9ac00c7edfa666a136c4e99abb12b175c71c9977b780153525e52be002da7815629b6d6f114a96f77962e89fc59437cf19d1216e083730f4b49d2f64c30a68d1316835243cf1579d30b86bef2f0c694cec15748a81a304efb591515086d5589a9baaabf4ba399cd533ad89a9ade8396ffeeda449f69806c05bfc42", 0xed, 0x7fff, 0x0, 0x3, r9}]) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:20 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d584504, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:20 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xdd09, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 498.261980][T26150] FAULT_INJECTION: forcing a failure. [ 498.261980][T26150] name failslab, interval 1, probability 0, space 0, times 0 [ 498.293497][T26150] CPU: 1 PID: 26150 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 12:44:20 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xddbc, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 498.303672][T26150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.313718][T26150] Call Trace: [ 498.317005][T26150] dump_stack+0x1dd/0x24e [ 498.321328][T26150] ? devkmsg_release+0x11c/0x11c [ 498.326254][T26150] ? show_regs_print_info+0x12/0x12 [ 498.331431][T26150] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 498.337476][T26150] should_fail+0x6fb/0x860 [ 498.341867][T26150] ? setup_fault_attr+0x3d0/0x3d0 [ 498.346863][T26150] ? __alloc_skb+0x88/0x4d0 [ 498.351375][T26150] should_failslab+0x5/0x20 [ 498.355852][T26150] kmem_cache_alloc+0x36/0x270 [ 498.360594][T26150] __alloc_skb+0x88/0x4d0 [ 498.364894][T26150] ? skb_put+0x114/0x1e0 [ 498.369109][T26150] __ip6_append_data+0x285e/0x3a90 [ 498.374194][T26150] ? __ip6_append_data+0x2231/0x3a90 [ 498.379453][T26150] ? ip6_setup_cork+0x1470/0x1470 [ 498.384448][T26150] ? ip6_append_data+0x2c0/0x2c0 [ 498.389354][T26150] ? lock_sock_nested+0x27a/0x310 [ 498.394349][T26150] ? xfrm_lookup_route+0x5f/0x170 [ 498.399345][T26150] ip6_append_data+0x1ad/0x2c0 [ 498.404080][T26150] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 498.409336][T26150] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 498.414679][T26150] rawv6_sendmsg+0x1b00/0x2cf0 [ 498.419416][T26150] ? compat_rawv6_ioctl+0x10/0x10 [ 498.424419][T26150] ? selinux_socket_sendmsg+0x11f/0x340 [ 498.429943][T26150] ? memset+0x1f/0x40 [ 498.433897][T26150] ? inet_send_prepare+0x1b7/0x470 [ 498.438979][T26150] ? inet_send_prepare+0x470/0x470 [ 498.444061][T26150] __sys_sendto+0x4f6/0x6c0 [ 498.448540][T26150] ? __ia32_sys_getpeername+0x80/0x80 [ 498.453886][T26150] ? vfs_write+0x427/0x4f0 [ 498.458276][T26150] ? debug_smp_processor_id+0x20/0x20 [ 498.463619][T26150] ? __ia32_sys_read+0x80/0x80 [ 498.468355][T26150] __x64_sys_sendto+0xda/0xf0 [ 498.473004][T26150] do_syscall_64+0xcb/0x150 [ 498.477480][T26150] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 498.483342][T26150] RIP: 0033:0x45e149 [ 498.487211][T26150] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 498.506786][T26150] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 498.515169][T26150] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 498.523110][T26150] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 498.531054][T26150] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 498.538998][T26150] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000051 [ 498.547068][T26150] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:20 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xde6d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:20 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x25d5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:20 executing program 3 (fault-call:1 fault-nth:82): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 498.556951][T26153] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 498.577214][T26168] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 498.617422][T26168] Quota error (device loop4): write_blk: dquota write failed [ 498.625346][T26168] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 498.647567][T26178] FAULT_INJECTION: forcing a failure. [ 498.647567][T26178] name failslab, interval 1, probability 0, space 0, times 0 [ 498.660588][T26153] FAULT_INJECTION: forcing a failure. [ 498.660588][T26153] name failslab, interval 1, probability 0, space 0, times 0 [ 498.663672][T26178] CPU: 1 PID: 26178 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 498.683295][T26178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.693349][T26178] Call Trace: [ 498.696640][T26178] dump_stack+0x1dd/0x24e [ 498.700949][T26178] ? devkmsg_release+0x11c/0x11c [ 498.705869][T26178] ? show_regs_print_info+0x12/0x12 [ 498.711057][T26178] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 498.717110][T26178] should_fail+0x6fb/0x860 [ 498.721519][T26178] ? setup_fault_attr+0x3d0/0x3d0 [ 498.726635][T26178] ? __alloc_skb+0x88/0x4d0 [ 498.731243][T26178] should_failslab+0x5/0x20 [ 498.735735][T26178] kmem_cache_alloc+0x36/0x270 [ 498.740480][T26178] __alloc_skb+0x88/0x4d0 [ 498.744792][T26178] ? skb_put+0x114/0x1e0 [ 498.749019][T26178] __ip6_append_data+0x285e/0x3a90 [ 498.754115][T26178] ? __ip6_append_data+0x2231/0x3a90 [ 498.759388][T26178] ? ip6_setup_cork+0x1470/0x1470 [ 498.764393][T26178] ? ip6_append_data+0x2c0/0x2c0 [ 498.769311][T26178] ? lock_sock_nested+0x27a/0x310 [ 498.774318][T26178] ? xfrm_lookup_route+0x5f/0x170 [ 498.779322][T26178] ip6_append_data+0x1ad/0x2c0 [ 498.784067][T26178] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 498.789341][T26178] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 498.794615][T26178] rawv6_sendmsg+0x1b00/0x2cf0 [ 498.799359][T26178] ? compat_rawv6_ioctl+0x10/0x10 [ 498.804362][T26178] ? selinux_socket_sendmsg+0x11f/0x340 [ 498.809901][T26178] ? memset+0x1f/0x40 [ 498.813857][T26178] ? inet_send_prepare+0x1b7/0x470 [ 498.819054][T26178] ? inet_send_prepare+0x470/0x470 [ 498.824140][T26178] __sys_sendto+0x4f6/0x6c0 [ 498.828621][T26178] ? __ia32_sys_getpeername+0x80/0x80 [ 498.833968][T26178] ? vfs_write+0x427/0x4f0 [ 498.838362][T26178] ? debug_smp_processor_id+0x20/0x20 [ 498.843707][T26178] ? __ia32_sys_read+0x80/0x80 [ 498.848443][T26178] __x64_sys_sendto+0xda/0xf0 [ 498.853097][T26178] do_syscall_64+0xcb/0x150 [ 498.857578][T26178] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 498.863445][T26178] RIP: 0033:0x45e149 [ 498.867313][T26178] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 498.886890][T26178] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 498.895275][T26178] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 498.903220][T26178] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 498.911165][T26178] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 498.919110][T26178] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000052 [ 498.927056][T26178] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 498.935010][T26153] CPU: 0 PID: 26153 Comm: syz-executor.4 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 498.945150][T26153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 498.955423][T26153] Call Trace: [ 498.958692][T26153] dump_stack+0x1dd/0x24e [ 498.963009][T26153] ? devkmsg_release+0x11c/0x11c [ 498.967925][T26153] ? show_regs_print_info+0x12/0x12 [ 498.973096][T26153] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 498.979176][T26153] should_fail+0x6fb/0x860 [ 498.983564][T26153] ? setup_fault_attr+0x3d0/0x3d0 [ 498.988580][T26153] ? getdqbuf+0x1b/0x50 [ 498.992707][T26153] should_failslab+0x5/0x20 [ 498.997181][T26153] __kmalloc+0x5f/0x2d0 [ 499.001367][T26153] getdqbuf+0x1b/0x50 [ 499.005318][T26153] get_free_dqblk+0x3f/0x5e0 [ 499.009931][T26153] ? getdqbuf+0x1b/0x50 [ 499.014058][T26153] do_insert_tree+0x27a/0x1c60 [ 499.018843][T26153] ? ext4_getblk+0x560/0x560 [ 499.023405][T26153] ? from_kuid+0x208/0x350 [ 499.027790][T26153] ? ext4_quota_read+0x1ef/0x290 [ 499.032782][T26153] ? find_next_id+0x6f0/0x6f0 [ 499.037434][T26153] ? ext4_quota_read+0x24f/0x290 [ 499.042341][T26153] do_insert_tree+0x6a9/0x1c60 [ 499.048910][T26153] ? find_next_id+0x6f0/0x6f0 [ 499.053563][T26153] ? getdqbuf+0x1b/0x50 [ 499.057689][T26153] ? __kmalloc+0xe7/0x2d0 [ 499.062004][T26153] ? getdqbuf+0x1b/0x50 [ 499.066128][T26153] qtree_write_dquot+0x3a5/0x520 [ 499.071039][T26153] ? qtree_entry_unused+0x120/0x120 [ 499.076217][T26153] ? mutex_lock+0xa6/0x110 [ 499.080638][T26153] ? mutex_trylock+0xb0/0xb0 [ 499.085201][T26153] v2_write_dquot+0x108/0x160 [ 499.089849][T26153] dquot_acquire+0x255/0x450 [ 499.094411][T26153] ? __ext4_journal_start_sb+0x3ad/0x420 [ 499.100022][T26153] ext4_acquire_dquot+0x1d5/0x280 [ 499.105051][T26153] dqget+0x9a0/0xd60 [ 499.108928][T26153] __dquot_initialize+0x3bb/0xd70 [ 499.113936][T26153] ? dquot_initialize+0x20/0x20 [ 499.118768][T26153] ? selinux_inode_setxattr+0x659/0x10b0 [ 499.124372][T26153] ? selinux_inode_getattr+0x3e0/0x3e0 [ 499.129863][T26153] ext4_xattr_set+0x108/0x330 [ 499.134524][T26153] ? do_syscall_64+0xcb/0x150 [ 499.139225][T26153] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 499.145264][T26153] ? ext4_xattr_set_credits+0x290/0x290 [ 499.150778][T26153] ? ext4_xattr_security_get+0x40/0x40 [ 499.156217][T26153] __vfs_setxattr+0x3be/0x400 [ 499.160874][T26153] __vfs_setxattr_noperm+0x12a/0x3e0 [ 499.166229][T26153] vfs_setxattr+0x11e/0x2d0 [ 499.170702][T26153] ? xattr_permission+0x350/0x350 [ 499.175696][T26153] ? strncpy_from_user+0x20c/0x370 [ 499.180775][T26153] setxattr+0x1e2/0x410 [ 499.184899][T26153] ? path_setxattr+0x240/0x240 [ 499.189643][T26153] ? preempt_count_add+0x66/0x150 [ 499.194689][T26153] ? __mnt_want_write+0x1f5/0x270 [ 499.199734][T26153] path_setxattr+0x164/0x240 [ 499.204308][T26153] ? fput_many+0x42/0x1a0 [ 499.208609][T26153] ? simple_xattr_list_add+0xf0/0xf0 [ 499.213867][T26153] ? __ia32_sys_read+0x80/0x80 [ 499.218601][T26153] __x64_sys_setxattr+0xb7/0xd0 [ 499.223426][T26153] do_syscall_64+0xcb/0x150 [ 499.227909][T26153] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 499.233781][T26153] RIP: 0033:0x45e149 [ 499.237651][T26153] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 499.257240][T26153] RSP: 002b:00007f0c4f57cc68 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc 12:44:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x0) 12:44:21 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5845b7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:21 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xdfc0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:21 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2728, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:21 executing program 3 (fault-call:1 fault-nth:83): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 499.265620][T26153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 499.273577][T26153] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 499.281519][T26153] RBP: 00007f0c4f57cca0 R08: 0000000000000000 R09: 0000000000000000 [ 499.289460][T26153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 499.298526][T26153] R13: 00007fffc04e570f R14: 00007f0c4f57d9c0 R15: 000000000119bf8c [ 499.306804][T26153] VFS: Not enough memory for quota buffers. [ 499.343120][T26189] FAULT_INJECTION: forcing a failure. [ 499.343120][T26189] name failslab, interval 1, probability 0, space 0, times 0 [ 499.358012][T26189] CPU: 0 PID: 26189 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 499.368155][T26189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.378181][T26189] Call Trace: [ 499.381443][T26189] dump_stack+0x1dd/0x24e [ 499.385739][T26189] ? devkmsg_release+0x11c/0x11c [ 499.390644][T26189] ? show_regs_print_info+0x12/0x12 [ 499.395844][T26189] should_fail+0x6fb/0x860 [ 499.400244][T26189] ? setup_fault_attr+0x3d0/0x3d0 [ 499.405235][T26189] ? __ip6_append_data+0x285e/0x3a90 [ 499.410483][T26189] should_failslab+0x5/0x20 [ 499.414976][T26189] __kmalloc_track_caller+0x5d/0x2c0 [ 499.420243][T26189] ? kmem_cache_alloc+0x1e0/0x270 [ 499.425239][T26189] ? __ip6_append_data+0x285e/0x3a90 [ 499.430496][T26189] __alloc_skb+0xd1/0x4d0 [ 499.434793][T26189] ? skb_put+0x114/0x1e0 [ 499.439003][T26189] __ip6_append_data+0x285e/0x3a90 [ 499.444096][T26189] ? __ip6_append_data+0x2231/0x3a90 [ 499.449352][T26189] ? ip6_setup_cork+0x1470/0x1470 [ 499.454344][T26189] ? ip6_append_data+0x2c0/0x2c0 [ 499.459245][T26189] ? lock_sock_nested+0x27a/0x310 [ 499.464234][T26189] ? xfrm_lookup_route+0x5f/0x170 [ 499.469227][T26189] ip6_append_data+0x1ad/0x2c0 [ 499.473957][T26189] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 499.479208][T26189] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 499.484458][T26189] rawv6_sendmsg+0x1b00/0x2cf0 [ 499.489193][T26189] ? compat_rawv6_ioctl+0x10/0x10 [ 499.494185][T26189] ? selinux_socket_sendmsg+0x11f/0x340 [ 499.499712][T26189] ? memset+0x1f/0x40 [ 499.503661][T26189] ? inet_send_prepare+0x1b7/0x470 [ 499.508741][T26189] ? inet_send_prepare+0x470/0x470 [ 499.513823][T26189] __sys_sendto+0x4f6/0x6c0 [ 499.518295][T26189] ? __ia32_sys_getpeername+0x80/0x80 [ 499.523637][T26189] ? vfs_write+0x427/0x4f0 [ 499.528020][T26189] ? debug_smp_processor_id+0x20/0x20 [ 499.533358][T26189] ? __ia32_sys_read+0x80/0x80 [ 499.538091][T26189] __x64_sys_sendto+0xda/0xf0 [ 499.542734][T26189] do_syscall_64+0xcb/0x150 [ 499.547223][T26189] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 499.553085][T26189] RIP: 0033:0x45e149 [ 499.556945][T26189] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 499.576514][T26189] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 499.584888][T26189] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 12:44:21 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x2}}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x84000) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f00000000c0)=0x4) write(r3, &(0x7f00000001c0), 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:21 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d584765, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:21 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2827, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:21 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xe06f, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:21 executing program 3 (fault-call:1 fault-nth:84): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:21 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58486a, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 499.592825][T26189] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 499.600769][T26189] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 499.608754][T26189] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000053 [ 499.616850][T26189] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:21 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x28da, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 499.684970][T26203] FAULT_INJECTION: forcing a failure. [ 499.684970][T26203] name failslab, interval 1, probability 0, space 0, times 0 [ 499.705474][T26203] CPU: 0 PID: 26203 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 499.715642][T26203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 499.721151][T26202] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 499.725682][T26203] Call Trace: [ 499.725699][T26203] dump_stack+0x1dd/0x24e [ 499.725708][T26203] ? devkmsg_release+0x11c/0x11c [ 499.725725][T26203] ? show_regs_print_info+0x12/0x12 [ 499.747604][T26202] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 499.752234][T26203] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 499.772477][T26203] should_fail+0x6fb/0x860 [ 499.776891][T26203] ? setup_fault_attr+0x3d0/0x3d0 12:44:21 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x2, 0x0) 12:44:21 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5848b8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:21 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2b00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:21 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d584cfd, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:21 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2b6d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 499.781904][T26203] ? __alloc_skb+0x88/0x4d0 [ 499.786395][T26203] should_failslab+0x5/0x20 [ 499.790889][T26203] kmem_cache_alloc+0x36/0x270 [ 499.795643][T26203] __alloc_skb+0x88/0x4d0 [ 499.799962][T26203] ? skb_put+0x114/0x1e0 [ 499.804194][T26203] __ip6_append_data+0x285e/0x3a90 [ 499.809301][T26203] ? __ip6_append_data+0x2231/0x3a90 [ 499.814578][T26203] ? ip6_setup_cork+0x1470/0x1470 [ 499.819599][T26203] ? ip6_append_data+0x2c0/0x2c0 [ 499.824522][T26203] ? lock_sock_nested+0x27a/0x310 [ 499.829541][T26203] ? xfrm_lookup_route+0x5f/0x170 [ 499.834556][T26203] ip6_append_data+0x1ad/0x2c0 [ 499.839310][T26203] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 499.844583][T26203] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 499.849857][T26203] rawv6_sendmsg+0x1b00/0x2cf0 [ 499.854604][T26203] ? compat_rawv6_ioctl+0x10/0x10 [ 499.859598][T26203] ? selinux_socket_sendmsg+0x11f/0x340 [ 499.865120][T26203] ? memset+0x1f/0x40 [ 499.869074][T26203] ? inet_send_prepare+0x1b7/0x470 [ 499.874152][T26203] ? inet_send_prepare+0x470/0x470 [ 499.879233][T26203] __sys_sendto+0x4f6/0x6c0 [ 499.883703][T26203] ? __ia32_sys_getpeername+0x80/0x80 [ 499.889044][T26203] ? vfs_write+0x427/0x4f0 [ 499.893427][T26203] ? debug_smp_processor_id+0x20/0x20 [ 499.898802][T26203] ? __ia32_sys_read+0x80/0x80 [ 499.903531][T26203] __x64_sys_sendto+0xda/0xf0 [ 499.908177][T26203] do_syscall_64+0xcb/0x150 [ 499.912650][T26203] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 499.918510][T26203] RIP: 0033:0x45e149 [ 499.922373][T26203] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 499.941944][T26203] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 499.950321][T26203] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 499.958259][T26203] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 499.966197][T26203] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 499.974137][T26203] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000054 [ 499.982077][T26203] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 500.028246][T26223] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 500.038729][T26223] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:22 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc5}, 0x4000000) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:22 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d584d9b, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:22 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xe405, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:22 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2c00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:22 executing program 3 (fault-call:1 fault-nth:85): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x3, 0x0) 12:44:22 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xe558, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:22 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d584e50, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:22 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2cc0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 500.542179][T26241] FAULT_INJECTION: forcing a failure. [ 500.542179][T26241] name failslab, interval 1, probability 0, space 0, times 0 [ 500.556435][T26239] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 500.581162][T26241] CPU: 0 PID: 26241 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 500.591318][T26241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.592163][T26239] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 500.601358][T26241] Call Trace: [ 500.601376][T26241] dump_stack+0x1dd/0x24e [ 500.601386][T26241] ? devkmsg_release+0x11c/0x11c [ 500.601394][T26241] ? show_regs_print_info+0x12/0x12 [ 500.601405][T26241] should_fail+0x6fb/0x860 [ 500.601413][T26241] ? setup_fault_attr+0x3d0/0x3d0 [ 500.601428][T26241] ? __ip6_append_data+0x285e/0x3a90 [ 500.648168][T26241] should_failslab+0x5/0x20 [ 500.652664][T26241] __kmalloc_track_caller+0x5d/0x2c0 [ 500.657937][T26241] ? kmem_cache_alloc+0x1e0/0x270 [ 500.662952][T26241] ? __ip6_append_data+0x285e/0x3a90 [ 500.668226][T26241] __alloc_skb+0xd1/0x4d0 [ 500.672543][T26241] ? skb_put+0x114/0x1e0 [ 500.676774][T26241] __ip6_append_data+0x285e/0x3a90 [ 500.681871][T26241] ? __ip6_append_data+0x2231/0x3a90 [ 500.687144][T26241] ? ip6_setup_cork+0x1470/0x1470 12:44:22 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xe5a0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:22 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58504e, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:22 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2d58, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 500.692152][T26241] ? ip6_append_data+0x2c0/0x2c0 [ 500.697073][T26241] ? lock_sock_nested+0x27a/0x310 [ 500.702079][T26241] ? xfrm_lookup_route+0x5f/0x170 [ 500.707087][T26241] ip6_append_data+0x1ad/0x2c0 [ 500.711832][T26241] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 500.717101][T26241] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 500.722375][T26241] rawv6_sendmsg+0x1b00/0x2cf0 [ 500.727135][T26241] ? compat_rawv6_ioctl+0x10/0x10 [ 500.732150][T26241] ? selinux_socket_sendmsg+0x11f/0x340 [ 500.737705][T26241] ? memset+0x1f/0x40 [ 500.741675][T26241] ? inet_send_prepare+0x1b7/0x470 [ 500.746772][T26241] ? inet_send_prepare+0x470/0x470 [ 500.751870][T26241] __sys_sendto+0x4f6/0x6c0 [ 500.756365][T26241] ? __ia32_sys_getpeername+0x80/0x80 [ 500.761725][T26241] ? vfs_write+0x427/0x4f0 [ 500.766123][T26241] ? debug_smp_processor_id+0x20/0x20 [ 500.771464][T26241] ? __ia32_sys_read+0x80/0x80 [ 500.776195][T26241] __x64_sys_sendto+0xda/0xf0 [ 500.780839][T26241] do_syscall_64+0xcb/0x150 [ 500.785359][T26241] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 500.791225][T26241] RIP: 0033:0x45e149 [ 500.795086][T26241] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 500.814660][T26241] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 500.823045][T26241] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 500.831031][T26241] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 12:44:22 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f0000000080)="605c3392a75307437ceef73714f4cc777c26056b8209aeb89400000000000071db4b665813e88a00", 0x28) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:22 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x4, 0x0) 12:44:22 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x300b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:22 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xe853, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:22 executing program 3 (fault-call:1 fault-nth:86): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:22 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d585295, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 500.838974][T26241] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 500.846917][T26241] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000055 [ 500.854951][T26241] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:22 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x30be, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:22 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xe99d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:22 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5853e8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 500.891966][T26271] FAULT_INJECTION: forcing a failure. [ 500.891966][T26271] name failslab, interval 1, probability 0, space 0, times 0 [ 500.908561][T26271] CPU: 0 PID: 26271 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 500.918720][T26271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.928767][T26271] Call Trace: [ 500.933444][T26271] dump_stack+0x1dd/0x24e 12:44:23 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x600080, 0x30) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="a8020000", @ANYRES16, @ANYBLOB="010006000000fbdbdf254f00000008000300", @ANYRES32=r7, @ANYBLOB="90007a8008000400010000000c0003003e18c260c09198610c000300e928dfea77d40439140001004f6d0060a8a1b63a13a998738284141414000200e85220f0e8a73a47793c5f5b4764535714000200f9c45e9b96c3c8fedbbb09e89f39c41208000400477c00001c0002"], 0x2a8}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r5, 0x202, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) 12:44:23 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xeaf0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3105, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xed84, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 500.937769][T26271] ? devkmsg_release+0x11c/0x11c [ 500.942702][T26271] ? show_regs_print_info+0x12/0x12 [ 500.947890][T26271] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 500.953951][T26271] should_fail+0x6fb/0x860 [ 500.958359][T26271] ? setup_fault_attr+0x3d0/0x3d0 [ 500.963373][T26271] ? __alloc_skb+0x88/0x4d0 [ 500.967869][T26271] should_failslab+0x5/0x20 [ 500.972363][T26271] kmem_cache_alloc+0x36/0x270 [ 500.977117][T26271] __alloc_skb+0x88/0x4d0 [ 500.981435][T26271] ? skb_put+0x114/0x1e0 [ 500.985672][T26271] __ip6_append_data+0x285e/0x3a90 [ 500.990775][T26271] ? __ip6_append_data+0x2231/0x3a90 [ 500.996055][T26271] ? ip6_setup_cork+0x1470/0x1470 [ 501.001073][T26271] ? ip6_append_data+0x2c0/0x2c0 [ 501.005995][T26271] ? lock_sock_nested+0x27a/0x310 [ 501.011024][T26271] ? xfrm_lookup_route+0x5f/0x170 [ 501.016053][T26271] ip6_append_data+0x1ad/0x2c0 [ 501.020787][T26271] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 501.026049][T26271] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 501.031299][T26271] rawv6_sendmsg+0x1b00/0x2cf0 [ 501.036029][T26271] ? compat_rawv6_ioctl+0x10/0x10 [ 501.041019][T26271] ? selinux_socket_sendmsg+0x11f/0x340 [ 501.046533][T26271] ? memset+0x1f/0x40 [ 501.050481][T26271] ? inet_send_prepare+0x1b7/0x470 [ 501.055563][T26271] ? inet_send_prepare+0x470/0x470 [ 501.060673][T26271] __sys_sendto+0x4f6/0x6c0 [ 501.065156][T26271] ? __ia32_sys_getpeername+0x80/0x80 [ 501.070498][T26271] ? vfs_write+0x427/0x4f0 [ 501.074882][T26271] ? debug_smp_processor_id+0x20/0x20 [ 501.080217][T26271] ? __ia32_sys_read+0x80/0x80 [ 501.084947][T26271] __x64_sys_sendto+0xda/0xf0 [ 501.089592][T26271] do_syscall_64+0xcb/0x150 [ 501.094062][T26271] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 501.099920][T26271] RIP: 0033:0x45e149 [ 501.103779][T26271] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 501.123349][T26271] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 501.131738][T26271] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 501.139680][T26271] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 501.147617][T26271] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 501.155555][T26271] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000056 [ 501.163506][T26271] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 501.209831][T26290] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 501.220429][T26290] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 501.235334][T26290] __quota_error: 13 callbacks suppressed [ 501.235342][T26290] Quota error (device loop4): write_blk: dquota write failed [ 501.249071][T26290] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x5, 0x0) 12:44:23 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3258, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xef35, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 3 (fault-call:1 fault-nth:87): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58557f, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x353c, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58582d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf037, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 501.263219][T26290] Quota error (device loop4): write_blk: dquota write failed [ 501.271195][T26290] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 501.298615][T26302] FAULT_INJECTION: forcing a failure. [ 501.298615][T26302] name failslab, interval 1, probability 0, space 0, times 0 [ 501.357619][T26314] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 501.359283][T26302] CPU: 1 PID: 26302 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 501.372758][T26314] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 501.376636][T26302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.376639][T26302] Call Trace: [ 501.376656][T26302] dump_stack+0x1dd/0x24e [ 501.376666][T26302] ? devkmsg_release+0x11c/0x11c [ 501.376674][T26302] ? show_regs_print_info+0x12/0x12 [ 501.376684][T26302] should_fail+0x6fb/0x860 [ 501.376703][T26302] ? setup_fault_attr+0x3d0/0x3d0 [ 501.393089][T26314] Quota error (device loop4): write_blk: dquota write failed [ 501.400958][T26302] ? __ip6_append_data+0x285e/0x3a90 [ 501.400966][T26302] should_failslab+0x5/0x20 [ 501.400978][T26302] __kmalloc_track_caller+0x5d/0x2c0 [ 501.400985][T26302] ? kmem_cache_alloc+0x1e0/0x270 [ 501.400998][T26302] ? __ip6_append_data+0x285e/0x3a90 [ 501.417321][T26314] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 501.418658][T26302] __alloc_skb+0xd1/0x4d0 [ 501.418671][T26302] ? skb_put+0x114/0x1e0 [ 501.434260][T26314] Quota error (device loop4): write_blk: dquota write failed [ 501.435390][T26302] __ip6_append_data+0x285e/0x3a90 [ 501.435405][T26302] ? __ip6_append_data+0x2231/0x3a90 [ 501.440734][T26314] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 501.445156][T26302] ? ip6_setup_cork+0x1470/0x1470 [ 501.445165][T26302] ? ip6_append_data+0x2c0/0x2c0 [ 501.445172][T26302] ? lock_sock_nested+0x27a/0x310 [ 501.445181][T26302] ? xfrm_lookup_route+0x5f/0x170 [ 501.445193][T26302] ip6_append_data+0x1ad/0x2c0 [ 501.531059][T26302] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 501.536331][T26302] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 501.541593][T26302] rawv6_sendmsg+0x1b00/0x2cf0 [ 501.546326][T26302] ? compat_rawv6_ioctl+0x10/0x10 [ 501.551319][T26302] ? selinux_socket_sendmsg+0x11f/0x340 [ 501.556832][T26302] ? memset+0x1f/0x40 [ 501.560782][T26302] ? inet_send_prepare+0x1b7/0x470 [ 501.565904][T26302] ? inet_send_prepare+0x470/0x470 [ 501.570983][T26302] __sys_sendto+0x4f6/0x6c0 [ 501.575498][T26302] ? __ia32_sys_getpeername+0x80/0x80 [ 501.580838][T26302] ? vfs_write+0x427/0x4f0 [ 501.585229][T26302] ? debug_smp_processor_id+0x20/0x20 [ 501.590584][T26302] ? __ia32_sys_read+0x80/0x80 [ 501.595333][T26302] __x64_sys_sendto+0xda/0xf0 [ 501.599985][T26302] do_syscall_64+0xcb/0x150 [ 501.604461][T26302] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 501.610323][T26302] RIP: 0033:0x45e149 [ 501.614186][T26302] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 501.633757][T26302] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 501.642135][T26302] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 501.650081][T26302] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 12:44:23 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000040)={'security\x00', 0xd8, "934a921e31c9f95963744c505d2e3adf28cc9f67fccbbfb753eddf351cdf83a2f5472382a38f1ffd592d8ea09dc5889fc1ebfec4af247ff4a05f8e72f17567df80be721ebf6fc8b9ca143b9bb03a5be15342410db778af0b0d9682060e12df2ff96aed13b4a4be13a2b5ffec7d172a1fd31ad376b38146f6895e410ca4b55a82f5797b5ab5f8638a6d75b1d54f5db1995db73687c4cf6b18f5649e42f21f8a8b681f0f266af7802cb86248d8cd7c2f8067a65015230e90789b0b8ecbb78ca3a22cea4220459255ccdb4106f553d21d82c1fe346f150d7427"}, &(0x7f0000000140)=0xfc) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:23 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d585832, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf088, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x35ef, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x8, 0x0) 12:44:23 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf0ea, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x369d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 3 (fault-call:1 fault-nth:88): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 501.658144][T26302] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 501.666086][T26302] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000057 [ 501.674029][T26302] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:23 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5858e5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x37f0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf4cd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:23 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x38a2, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 501.747702][T26340] FAULT_INJECTION: forcing a failure. [ 501.747702][T26340] name failslab, interval 1, probability 0, space 0, times 0 [ 501.774708][T26344] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 501.780562][T26340] CPU: 1 PID: 26340 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 501.793689][T26340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.799969][T26344] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 501.803725][T26340] Call Trace: [ 501.803741][T26340] dump_stack+0x1dd/0x24e [ 501.803755][T26340] ? devkmsg_release+0x11c/0x11c [ 501.830428][T26340] ? show_regs_print_info+0x12/0x12 [ 501.835607][T26340] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 501.841662][T26340] should_fail+0x6fb/0x860 [ 501.845909][T26344] Quota error (device loop4): write_blk: dquota write failed [ 501.846065][T26340] ? setup_fault_attr+0x3d0/0x3d0 [ 501.858401][T26340] ? __alloc_skb+0x88/0x4d0 [ 501.861979][T26344] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 501.862885][T26340] should_failslab+0x5/0x20 [ 501.862896][T26340] kmem_cache_alloc+0x36/0x270 [ 501.862909][T26340] __alloc_skb+0x88/0x4d0 [ 501.886201][T26340] ? skb_put+0x114/0x1e0 [ 501.890437][T26340] __ip6_append_data+0x285e/0x3a90 [ 501.895540][T26340] ? __ip6_append_data+0x2231/0x3a90 [ 501.900815][T26340] ? ip6_setup_cork+0x1470/0x1470 [ 501.905826][T26340] ? ip6_append_data+0x2c0/0x2c0 [ 501.910747][T26340] ? lock_sock_nested+0x27a/0x310 [ 501.915757][T26340] ? xfrm_lookup_route+0x5f/0x170 [ 501.920774][T26340] ip6_append_data+0x1ad/0x2c0 [ 501.925526][T26340] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 501.930798][T26340] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 501.936061][T26340] rawv6_sendmsg+0x1b00/0x2cf0 [ 501.940796][T26340] ? compat_rawv6_ioctl+0x10/0x10 [ 501.945786][T26340] ? selinux_socket_sendmsg+0x11f/0x340 [ 501.951305][T26340] ? memset+0x1f/0x40 [ 501.955256][T26340] ? inet_send_prepare+0x1b7/0x470 [ 501.960332][T26340] ? inet_send_prepare+0x470/0x470 [ 501.965412][T26340] __sys_sendto+0x4f6/0x6c0 [ 501.969893][T26340] ? __ia32_sys_getpeername+0x80/0x80 [ 501.975238][T26340] ? vfs_write+0x427/0x4f0 [ 501.979634][T26340] ? debug_smp_processor_id+0x20/0x20 [ 501.984981][T26340] ? __ia32_sys_read+0x80/0x80 [ 501.989711][T26340] __x64_sys_sendto+0xda/0xf0 [ 501.994357][T26340] do_syscall_64+0xcb/0x150 [ 501.998832][T26340] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 502.004691][T26340] RIP: 0033:0x45e149 [ 502.008554][T26340] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 502.028133][T26340] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 502.036525][T26340] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 12:44:24 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6(0xa, 0x80000, 0xfffffffd) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:24 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3a00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf568, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xf, 0x0) 12:44:24 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d585980, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 3 (fault-call:1 fault-nth:89): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf5ff, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3c00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3c35, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 502.044465][T26340] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 502.052402][T26340] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 502.060339][T26340] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000058 [ 502.068277][T26340] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:24 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d585d63, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf620, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 502.130888][T26367] FAULT_INJECTION: forcing a failure. [ 502.130888][T26367] name failslab, interval 1, probability 0, space 0, times 0 [ 502.146927][T26366] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 502.170260][T26366] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 502.188715][T26367] CPU: 1 PID: 26367 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 502.198866][T26367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.208914][T26367] Call Trace: [ 502.212195][T26367] dump_stack+0x1dd/0x24e [ 502.216511][T26367] ? devkmsg_release+0x11c/0x11c [ 502.221439][T26367] ? show_regs_print_info+0x12/0x12 [ 502.226625][T26367] should_fail+0x6fb/0x860 [ 502.231035][T26367] ? setup_fault_attr+0x3d0/0x3d0 [ 502.236047][T26367] ? __ip6_append_data+0x285e/0x3a90 [ 502.241406][T26367] should_failslab+0x5/0x20 [ 502.245902][T26367] __kmalloc_track_caller+0x5d/0x2c0 [ 502.251176][T26367] ? kmem_cache_alloc+0x1e0/0x270 [ 502.256188][T26367] ? __ip6_append_data+0x285e/0x3a90 [ 502.261462][T26367] __alloc_skb+0xd1/0x4d0 [ 502.265775][T26367] ? skb_put+0x114/0x1e0 [ 502.270002][T26367] __ip6_append_data+0x285e/0x3a90 [ 502.275191][T26367] ? __ip6_append_data+0x2231/0x3a90 12:44:24 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3d20, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 502.280466][T26367] ? ip6_setup_cork+0x1470/0x1470 [ 502.285484][T26367] ? ip6_append_data+0x2c0/0x2c0 [ 502.290413][T26367] ? lock_sock_nested+0x27a/0x310 [ 502.295424][T26367] ? xfrm_lookup_route+0x5f/0x170 [ 502.300434][T26367] ip6_append_data+0x1ad/0x2c0 [ 502.305185][T26367] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 502.310452][T26367] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 502.315706][T26367] rawv6_sendmsg+0x1b00/0x2cf0 [ 502.320439][T26367] ? compat_rawv6_ioctl+0x10/0x10 [ 502.325434][T26367] ? selinux_socket_sendmsg+0x11f/0x340 [ 502.330949][T26367] ? memset+0x1f/0x40 [ 502.334901][T26367] ? inet_send_prepare+0x1b7/0x470 [ 502.339984][T26367] ? inet_send_prepare+0x470/0x470 [ 502.345075][T26367] __sys_sendto+0x4f6/0x6c0 [ 502.349548][T26367] ? __ia32_sys_getpeername+0x80/0x80 [ 502.354889][T26367] ? vfs_write+0x427/0x4f0 [ 502.359280][T26367] ? debug_smp_processor_id+0x20/0x20 [ 502.364631][T26367] ? __ia32_sys_read+0x80/0x80 [ 502.369365][T26367] __x64_sys_sendto+0xda/0xf0 [ 502.374048][T26367] do_syscall_64+0xcb/0x150 [ 502.378520][T26367] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 502.384495][T26367] RIP: 0033:0x45e149 [ 502.388359][T26367] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 502.407935][T26367] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 502.416313][T26367] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 502.424372][T26367] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 12:44:24 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf81b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d585dc5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x30, 0x0) 12:44:24 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3d88, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf8ce, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 502.432318][T26367] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 502.440292][T26367] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000059 [ 502.448232][T26367] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:24 executing program 3 (fault-call:1 fault-nth:90): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3dd3, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d585f18, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xfa65, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xe, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r4}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r4, 0x4) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:24 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3f00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xfbb8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d586000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 502.530344][T26404] FAULT_INJECTION: forcing a failure. [ 502.530344][T26404] name failslab, interval 1, probability 0, space 0, times 0 [ 502.553785][T26401] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:44:24 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4000, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 502.568786][T26401] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 502.608529][T26404] CPU: 1 PID: 26404 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 502.618688][T26404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.628730][T26404] Call Trace: [ 502.632011][T26404] dump_stack+0x1dd/0x24e [ 502.636340][T26404] ? devkmsg_release+0x11c/0x11c [ 502.641263][T26404] ? show_regs_print_info+0x12/0x12 [ 502.646446][T26404] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 502.652501][T26404] should_fail+0x6fb/0x860 [ 502.656907][T26404] ? setup_fault_attr+0x3d0/0x3d0 [ 502.661922][T26404] ? __alloc_skb+0x88/0x4d0 [ 502.666414][T26404] should_failslab+0x5/0x20 [ 502.670903][T26404] kmem_cache_alloc+0x36/0x270 [ 502.675656][T26404] __alloc_skb+0x88/0x4d0 [ 502.679973][T26404] ? skb_put+0x114/0x1e0 [ 502.684205][T26404] __ip6_append_data+0x285e/0x3a90 [ 502.689311][T26404] ? __ip6_append_data+0x2231/0x3a90 [ 502.694597][T26404] ? ip6_setup_cork+0x1470/0x1470 [ 502.699608][T26404] ? ip6_append_data+0x2c0/0x2c0 [ 502.704521][T26404] ? lock_sock_nested+0x27a/0x310 [ 502.709525][T26404] ? xfrm_lookup_route+0x5f/0x170 [ 502.714536][T26404] ip6_append_data+0x1ad/0x2c0 [ 502.719285][T26404] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 502.724552][T26404] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 502.729813][T26404] rawv6_sendmsg+0x1b00/0x2cf0 [ 502.734548][T26404] ? compat_rawv6_ioctl+0x10/0x10 [ 502.739547][T26404] ? selinux_socket_sendmsg+0x11f/0x340 [ 502.745071][T26404] ? memset+0x1f/0x40 [ 502.749019][T26404] ? inet_send_prepare+0x1b7/0x470 [ 502.754095][T26404] ? inet_send_prepare+0x470/0x470 [ 502.759174][T26404] __sys_sendto+0x4f6/0x6c0 [ 502.763644][T26404] ? __ia32_sys_getpeername+0x80/0x80 [ 502.768989][T26404] ? vfs_write+0x427/0x4f0 [ 502.773372][T26404] ? debug_smp_processor_id+0x20/0x20 [ 502.778754][T26404] ? __ia32_sys_read+0x80/0x80 [ 502.783485][T26404] __x64_sys_sendto+0xda/0xf0 [ 502.788131][T26404] do_syscall_64+0xcb/0x150 [ 502.792622][T26404] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 502.798484][T26404] RIP: 0033:0x45e149 [ 502.802347][T26404] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 502.821939][T26404] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 502.830319][T26404] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 502.838256][T26404] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 502.846197][T26404] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c 12:44:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x300, 0x0) 12:44:24 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xfc00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d586016, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 3 (fault-call:1 fault-nth:91): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4086, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffffffffffff6223, 0x400000) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000000080)="822fd8588489517ebcdfe44011c9419b7667b875da77a22b889b845bc15820d96a1af94ed9660b6d3a37ea99ab5844c32ff0fb054252b708aa2d75b060b6e04b833b635e8a3c635711282e5cc247dc185e0e9de118cb6f9dd4acf0d20f2545aca3816090eac7836764953295af3ebdb387f9763736f6a7041a5764f3f7d3c8b2dd85edd22ff3fe5d7f27ce222b19bab5fe4aca61b2e9d881fdd5d810f82b") ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:24 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xfc02, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x41cd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 502.854137][T26404] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000005a [ 502.862073][T26404] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:24 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xfd4c, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5860c9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4320, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:24 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4504, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 502.922495][T26436] FAULT_INJECTION: forcing a failure. [ 502.922495][T26436] name failslab, interval 1, probability 0, space 0, times 0 [ 502.935259][T26436] CPU: 1 PID: 26436 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 502.945397][T26436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.955441][T26436] Call Trace: [ 502.958728][T26436] dump_stack+0x1dd/0x24e [ 502.963050][T26436] ? devkmsg_release+0x11c/0x11c [ 502.967977][T26436] ? show_regs_print_info+0x12/0x12 [ 502.973168][T26436] should_fail+0x6fb/0x860 [ 502.977582][T26436] ? setup_fault_attr+0x3d0/0x3d0 [ 502.982597][T26436] ? __ip6_append_data+0x285e/0x3a90 [ 502.987871][T26436] should_failslab+0x5/0x20 [ 502.992365][T26436] __kmalloc_track_caller+0x5d/0x2c0 [ 502.997637][T26436] ? kmem_cache_alloc+0x1e0/0x270 [ 503.002635][T26436] ? __ip6_append_data+0x285e/0x3a90 [ 503.007891][T26436] __alloc_skb+0xd1/0x4d0 [ 503.012191][T26436] ? skb_put+0x114/0x1e0 [ 503.016403][T26436] __ip6_append_data+0x285e/0x3a90 [ 503.021487][T26436] ? __ip6_append_data+0x2231/0x3a90 [ 503.026743][T26436] ? ip6_setup_cork+0x1470/0x1470 [ 503.031735][T26436] ? ip6_append_data+0x2c0/0x2c0 [ 503.036639][T26436] ? lock_sock_nested+0x27a/0x310 [ 503.041631][T26436] ? xfrm_lookup_route+0x5f/0x170 [ 503.046625][T26436] ip6_append_data+0x1ad/0x2c0 [ 503.051358][T26436] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 503.056611][T26436] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 503.061866][T26436] rawv6_sendmsg+0x1b00/0x2cf0 [ 503.066602][T26436] ? compat_rawv6_ioctl+0x10/0x10 [ 503.071601][T26436] ? selinux_socket_sendmsg+0x11f/0x340 [ 503.077117][T26436] ? __pv_queued_spin_lock_slowpath+0xaa4/0xcf0 [ 503.083325][T26436] ? debug_smp_processor_id+0x20/0x20 [ 503.088668][T26436] ? inet_send_prepare+0x1b7/0x470 [ 503.093746][T26436] ? inet_send_prepare+0x470/0x470 [ 503.098829][T26436] __sys_sendto+0x4f6/0x6c0 [ 503.103301][T26436] ? __ia32_sys_getpeername+0x80/0x80 [ 503.108661][T26436] ? debug_smp_processor_id+0x20/0x20 [ 503.114010][T26436] ? __schedule+0xae9/0x1080 [ 503.118585][T26436] ? __fpregs_load_activate+0x2d3/0x390 [ 503.124109][T26436] ? switch_fpu_return+0x10/0x10 [ 503.129018][T26436] __x64_sys_sendto+0xda/0xf0 [ 503.133670][T26436] do_syscall_64+0xcb/0x150 [ 503.138145][T26436] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 503.144020][T26436] RIP: 0033:0x45e149 [ 503.147887][T26436] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 503.167458][T26436] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 503.175836][T26436] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 503.183781][T26436] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 503.191734][T26436] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 503.199678][T26436] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000005b [ 503.207712][T26436] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x500, 0x0) 12:44:25 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xfe80, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:25 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58635d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:25 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x45b7, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:25 executing program 3 (fault-call:1 fault-nth:92): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 503.240101][T26447] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 503.305114][T26463] FAULT_INJECTION: forcing a failure. [ 503.305114][T26463] name failslab, interval 1, probability 0, space 0, times 0 [ 503.319135][T26463] CPU: 0 PID: 26463 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 503.329284][T26463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.339324][T26463] Call Trace: [ 503.342606][T26463] dump_stack+0x1dd/0x24e [ 503.346925][T26463] ? devkmsg_release+0x11c/0x11c [ 503.351856][T26463] ? show_regs_print_info+0x12/0x12 [ 503.357050][T26463] ? __schedule+0xae9/0x1080 [ 503.361633][T26463] should_fail+0x6fb/0x860 [ 503.366038][T26463] ? setup_fault_attr+0x3d0/0x3d0 [ 503.371039][T26463] ? check_preemption_disabled+0x9e/0x330 [ 503.376733][T26463] ? debug_smp_processor_id+0x20/0x20 [ 503.382079][T26463] ? ip6_fraglist_init+0xb2/0x960 [ 503.387074][T26463] should_failslab+0x5/0x20 [ 503.391549][T26463] __kmalloc_track_caller+0x5d/0x2c0 [ 503.396804][T26463] kmemdup+0x21/0x50 [ 503.400669][T26463] ip6_fraglist_init+0xb2/0x960 [ 503.405492][T26463] ? ip_idents_reserve+0xdd/0x110 [ 503.410487][T26463] ? ipv6_select_ident+0x185/0x2b0 [ 503.415579][T26463] ip6_fragment+0x17e3/0x2880 [ 503.420229][T26463] ? __ip6_finish_output+0x620/0x620 [ 503.425481][T26463] ? ip6_frag_next+0xad0/0xad0 [ 503.430216][T26463] ? __ip6_append_data+0x22be/0x3a90 [ 503.435485][T26463] ? ip6_mtu+0xf1/0x140 [ 503.439613][T26463] ? __ip6_finish_output+0x48b/0x620 [ 503.444866][T26463] ip6_output+0x2f8/0x420 [ 503.449164][T26463] ? ac6_seq_show+0xe0/0xe0 [ 503.453634][T26463] ? ip6_output+0x420/0x420 [ 503.458109][T26463] ? __rcu_read_lock+0x50/0x50 [ 503.462842][T26463] ? nf_hook_slow+0x1a6/0x1f0 [ 503.467488][T26463] ip6_local_out+0x361/0x450 [ 503.472052][T26463] ? dst_output+0x80/0x80 [ 503.476349][T26463] ? lock_sock_nested+0x27a/0x310 [ 503.481345][T26463] ? __ip6_local_out+0x3d0/0x3d0 [ 503.486250][T26463] ? ip6_append_data+0x1ad/0x2c0 [ 503.491154][T26463] ? rawv6_send_hdrinc+0x11ac/0x11b0 [ 503.496412][T26463] ip6_push_pending_frames+0x119/0x230 [ 503.501858][T26463] rawv6_sendmsg+0x211b/0x2cf0 [ 503.506594][T26463] ? compat_rawv6_ioctl+0x10/0x10 [ 503.511591][T26463] ? selinux_socket_sendmsg+0x11f/0x340 [ 503.517109][T26463] ? memset+0x1f/0x40 [ 503.521062][T26463] ? inet_send_prepare+0x1b7/0x470 [ 503.526140][T26463] ? inet_send_prepare+0x470/0x470 [ 503.531220][T26463] __sys_sendto+0x4f6/0x6c0 [ 503.535696][T26463] ? __ia32_sys_getpeername+0x80/0x80 [ 503.541051][T26463] ? vfs_write+0x427/0x4f0 [ 503.545459][T26463] ? debug_smp_processor_id+0x20/0x20 [ 503.550800][T26463] ? __ia32_sys_read+0x80/0x80 [ 503.555553][T26463] __x64_sys_sendto+0xda/0xf0 [ 503.560200][T26463] do_syscall_64+0xcb/0x150 [ 503.564673][T26463] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 503.570542][T26463] RIP: 0033:0x45e149 [ 503.574408][T26463] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 503.593979][T26463] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 503.602358][T26463] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 503.610298][T26463] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 503.618254][T26463] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 503.626200][T26463] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000005c [ 503.634142][T26463] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:25 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d586400, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:25 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4765, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:25 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xff00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:25 executing program 3 (fault-call:1 fault-nth:93): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:25 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xf00, 0x0) 12:44:25 executing program 2: r0 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x11, r0, 0xee00, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r0, 0x27, 0x72}, &(0x7f00000003c0)=ANY=[@ANYBLOB="656e633d6f6100726d36340000000000000000000000000086deab4b331c55ceaa3e16cece0000000000000000000000000400"/76], &(0x7f00000002c0)="d8ed8e6203dd8833cacd1944a539b88519a73e069af35b59b8c0f347612f52681efae833617e59", &(0x7f0000000440)=""/114) keyctl$describe(0x6, r0, &(0x7f0000000300)=""/201, 0xc9) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) ioctl$int_out(r4, 0x2, &(0x7f0000000040)) r5 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000080)) write(r2, &(0x7f00000001c0), 0xffffff0f) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:25 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xfff5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:25 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x486a, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 503.669788][T26467] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 503.706325][T26478] FAULT_INJECTION: forcing a failure. [ 503.706325][T26478] name failslab, interval 1, probability 0, space 0, times 0 [ 503.730299][T26478] CPU: 0 PID: 26478 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 503.740454][T26478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.750507][T26478] Call Trace: [ 503.753789][T26478] dump_stack+0x1dd/0x24e [ 503.758103][T26478] ? devkmsg_release+0x11c/0x11c [ 503.763025][T26478] ? show_regs_print_info+0x12/0x12 [ 503.768200][T26478] ? do_user_addr_fault+0x55c/0x9f0 [ 503.773458][T26478] should_fail+0x6fb/0x860 [ 503.777851][T26478] ? setup_fault_attr+0x3d0/0x3d0 [ 503.782956][T26478] ? check_preemption_disabled+0x9e/0x330 [ 503.788644][T26478] ? debug_smp_processor_id+0x20/0x20 [ 503.793988][T26478] ? ip6_fraglist_init+0xb2/0x960 [ 503.798981][T26478] should_failslab+0x5/0x20 [ 503.803452][T26478] __kmalloc_track_caller+0x5d/0x2c0 [ 503.808712][T26478] kmemdup+0x21/0x50 [ 503.812576][T26478] ip6_fraglist_init+0xb2/0x960 [ 503.817397][T26478] ? ip_idents_reserve+0xdd/0x110 [ 503.822389][T26478] ? ipv6_select_ident+0x185/0x2b0 [ 503.827472][T26478] ip6_fragment+0x17e3/0x2880 [ 503.832120][T26478] ? __ip6_finish_output+0x620/0x620 [ 503.837370][T26478] ? ip6_frag_next+0xad0/0xad0 [ 503.842104][T26478] ? __ip6_append_data+0x22be/0x3a90 [ 503.847358][T26478] ? ip6_mtu+0xf1/0x140 [ 503.851481][T26478] ? __ip6_finish_output+0x48b/0x620 [ 503.856735][T26478] ip6_output+0x2f8/0x420 [ 503.861034][T26478] ? ac6_seq_show+0xe0/0xe0 [ 503.865505][T26478] ? ip6_output+0x420/0x420 [ 503.869981][T26478] ? __rcu_read_lock+0x50/0x50 [ 503.874713][T26478] ? nf_hook_slow+0x1a6/0x1f0 [ 503.879359][T26478] ip6_local_out+0x361/0x450 [ 503.883919][T26478] ? dst_output+0x80/0x80 [ 503.888216][T26478] ? lock_sock_nested+0x27a/0x310 [ 503.893210][T26478] ? __ip6_local_out+0x3d0/0x3d0 [ 503.898116][T26478] ? ip6_append_data+0x1ad/0x2c0 [ 503.903020][T26478] ? rawv6_send_hdrinc+0x11ac/0x11b0 [ 503.908388][T26478] ip6_push_pending_frames+0x119/0x230 [ 503.913901][T26478] rawv6_sendmsg+0x211b/0x2cf0 [ 503.918637][T26478] ? compat_rawv6_ioctl+0x10/0x10 [ 503.923635][T26478] ? selinux_socket_sendmsg+0x11f/0x340 [ 503.929153][T26478] ? memset+0x1f/0x40 [ 503.933115][T26478] ? inet_send_prepare+0x1b7/0x470 [ 503.938194][T26478] ? inet_send_prepare+0x470/0x470 [ 503.943272][T26478] __sys_sendto+0x4f6/0x6c0 [ 503.947760][T26478] ? __ia32_sys_getpeername+0x80/0x80 [ 503.953120][T26478] ? vfs_write+0x427/0x4f0 [ 503.957509][T26478] ? debug_smp_processor_id+0x20/0x20 [ 503.962851][T26478] ? __ia32_sys_read+0x80/0x80 [ 503.967589][T26478] __x64_sys_sendto+0xda/0xf0 [ 503.972239][T26478] do_syscall_64+0xcb/0x150 [ 503.976716][T26478] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 503.982582][T26478] RIP: 0033:0x45e149 [ 503.986449][T26478] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 504.006029][T26478] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 504.014425][T26478] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 504.022367][T26478] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 12:44:26 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x48b8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:26 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5864b0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:26 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 504.030309][T26478] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 504.038250][T26478] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000005d [ 504.046194][T26478] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:26 executing program 3 (fault-call:1 fault-nth:94): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:26 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4cfd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 504.072870][T26488] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 504.096962][T26488] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 504.127375][T26501] FAULT_INJECTION: forcing a failure. [ 504.127375][T26501] name failslab, interval 1, probability 0, space 0, times 0 [ 504.140006][T26501] CPU: 1 PID: 26501 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 504.150137][T26501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.160177][T26501] Call Trace: [ 504.163466][T26501] dump_stack+0x1dd/0x24e [ 504.167791][T26501] ? devkmsg_release+0x11c/0x11c 12:44:26 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:26 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d586547, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x3000, 0x0) [ 504.172810][T26501] ? show_regs_print_info+0x12/0x12 [ 504.177999][T26501] should_fail+0x6fb/0x860 [ 504.182404][T26501] ? setup_fault_attr+0x3d0/0x3d0 [ 504.187416][T26501] ? alloc_skb_with_frags+0xb1/0x580 [ 504.192687][T26501] should_failslab+0x5/0x20 [ 504.197181][T26501] __kmalloc_track_caller+0x5d/0x2c0 [ 504.202458][T26501] ? kmem_cache_alloc+0x1e0/0x270 [ 504.207469][T26501] ? fib6_nh_age_exceptions+0xa00/0xa00 [ 504.213002][T26501] ? alloc_skb_with_frags+0xb1/0x580 [ 504.218269][T26501] __alloc_skb+0xd1/0x4d0 12:44:26 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4d9b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 504.222584][T26501] alloc_skb_with_frags+0xb1/0x580 [ 504.232459][T26501] sock_alloc_send_pskb+0x86d/0xcb0 [ 504.237654][T26501] ? sock_kzfree_s+0x50/0x50 [ 504.242242][T26501] ? fib6_rule_lookup+0x2e7/0x6f0 [ 504.247263][T26501] ? ip6_route_output_flags_noref+0x300/0x300 [ 504.253319][T26501] ? fib6_lookup+0x410/0x410 [ 504.257898][T26501] ? __ipv6_dev_get_saddr+0x40c/0x440 [ 504.263264][T26501] __ip6_append_data+0x278f/0x3a90 [ 504.268369][T26501] ? ip6_setup_cork+0x1470/0x1470 [ 504.273381][T26501] ? ip6_append_data+0x2c0/0x2c0 12:44:26 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x10500, 0x0) write(r1, &(0x7f00000001c0), 0xffffff0f) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000040)=0x1) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r3, 0x4) 12:44:26 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:26 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:26 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4e50, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 504.278307][T26501] ip6_append_data+0x1ad/0x2c0 [ 504.283059][T26501] ? icmpv6_xrlim_allow+0x430/0x430 [ 504.288248][T26501] ? icmpv6_xrlim_allow+0x430/0x430 [ 504.293437][T26501] icmp6_send+0x198f/0x2610 [ 504.297938][T26501] ? icmpv6_param_prob+0x40/0x40 [ 504.302861][T26501] ? memset+0x1f/0x40 [ 504.306832][T26501] ? memset+0x1f/0x40 [ 504.310799][T26501] ? memset+0x1f/0x40 [ 504.314772][T26501] ? unwind_next_frame+0x1aa9/0x1f30 [ 504.320057][T26501] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 504.326044][T26501] ? preempt_count_add+0x66/0x150 12:44:26 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:26 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5865fa, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 504.331056][T26501] ? preempt_count_add+0x66/0x150 [ 504.336067][T26501] ? debug_smp_processor_id+0x20/0x20 [ 504.341424][T26501] ? unwind_next_frame+0x1aa9/0x1f30 [ 504.346696][T26501] ? icmpv6_param_prob+0x40/0x40 [ 504.351623][T26501] icmpv6_send+0x4b/0x60 [ 504.355869][T26501] ip6_link_failure+0x7e/0x430 [ 504.360731][T26501] ? ip6_negative_advice+0x580/0x580 [ 504.366442][T26501] ? ip6_negative_advice+0x580/0x580 [ 504.371730][T26501] sit_tunnel_xmit+0xba2/0x2570 [ 504.376573][T26501] ? ipip6_tunnel_uninit+0x3f0/0x3f0 [ 504.381851][T26501] ? stack_trace_save+0x120/0x1f0 [ 504.386865][T26501] ? check_preemption_disabled+0x9e/0x330 [ 504.392572][T26501] ? validate_xmit_skb+0x630/0xc50 [ 504.397674][T26501] ? debug_smp_processor_id+0x20/0x20 [ 504.403031][T26501] ? check_preemption_disabled+0x9e/0x330 [ 504.408735][T26501] ? debug_smp_processor_id+0x20/0x20 [ 504.414094][T26501] xmit_one+0x239/0x480 [ 504.418235][T26501] __dev_queue_xmit+0x1935/0x2700 [ 504.423240][T26501] ? ip6_local_out+0x361/0x450 [ 504.427987][T26501] ? ip6_push_pending_frames+0x119/0x230 [ 504.433602][T26501] ? rawv6_sendmsg+0x211b/0x2cf0 [ 504.438531][T26501] ? dev_queue_xmit+0x20/0x20 [ 504.443198][T26501] ip6_finish_output2+0x1160/0x1640 [ 504.448384][T26501] ? __ip6_finish_output+0x620/0x620 [ 504.453652][T26501] ? ip6_fraglist_prepare+0x690/0x690 [ 504.459011][T26501] ? ip6_fragment+0x1a6b/0x2880 [ 504.463849][T26501] ip6_fragment+0x1f69/0x2880 [ 504.468521][T26501] ? __ip6_finish_output+0x620/0x620 [ 504.473791][T26501] ? ip6_frag_next+0xad0/0xad0 [ 504.478542][T26501] ? __ip6_append_data+0x22be/0x3a90 [ 504.483812][T26501] ? ip6_mtu+0xf1/0x140 [ 504.487957][T26501] ? __ip6_finish_output+0x48b/0x620 [ 504.493226][T26501] ip6_output+0x2f8/0x420 [ 504.497533][T26501] ? ac6_seq_show+0xe0/0xe0 [ 504.502005][T26501] ? ip6_output+0x420/0x420 [ 504.506474][T26501] ? __rcu_read_lock+0x50/0x50 [ 504.511202][T26501] ? nf_hook_slow+0x1a6/0x1f0 [ 504.515846][T26501] ip6_local_out+0x361/0x450 [ 504.520403][T26501] ? dst_output+0x80/0x80 [ 504.524700][T26501] ? lock_sock_nested+0x27a/0x310 [ 504.529693][T26501] ? __ip6_local_out+0x3d0/0x3d0 [ 504.534600][T26501] ? ip6_append_data+0x1ad/0x2c0 [ 504.539508][T26501] ? rawv6_send_hdrinc+0x11ac/0x11b0 [ 504.544761][T26501] ip6_push_pending_frames+0x119/0x230 [ 504.550187][T26501] rawv6_sendmsg+0x211b/0x2cf0 [ 504.554919][T26501] ? compat_rawv6_ioctl+0x10/0x10 [ 504.559911][T26501] ? selinux_socket_sendmsg+0x11f/0x340 [ 504.565430][T26501] ? memset+0x1f/0x40 [ 504.569471][T26501] ? inet_send_prepare+0x1b7/0x470 [ 504.574558][T26501] ? inet_send_prepare+0x470/0x470 [ 504.579637][T26501] __sys_sendto+0x4f6/0x6c0 [ 504.584108][T26501] ? __ia32_sys_getpeername+0x80/0x80 [ 504.589449][T26501] ? vfs_write+0x427/0x4f0 [ 504.593849][T26501] ? debug_smp_processor_id+0x20/0x20 [ 504.599187][T26501] ? __ia32_sys_read+0x80/0x80 [ 504.603917][T26501] __x64_sys_sendto+0xda/0xf0 [ 504.608564][T26501] do_syscall_64+0xcb/0x150 [ 504.613035][T26501] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 504.618895][T26501] RIP: 0033:0x45e149 [ 504.622757][T26501] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 504.642326][T26501] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 504.650701][T26501] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 504.658641][T26501] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 504.666580][T26501] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 504.674520][T26501] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000005e 12:44:26 executing program 3 (fault-call:1 fault-nth:95): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:26 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5868ad, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:26 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x6, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:26 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x504e, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 504.682459][T26501] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 504.734013][T26539] FAULT_INJECTION: forcing a failure. [ 504.734013][T26539] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 504.759638][T26539] CPU: 1 PID: 26539 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 504.769911][T26539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 504.779954][T26539] Call Trace: [ 504.780618][T26538] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 504.783232][T26539] dump_stack+0x1dd/0x24e [ 504.783246][T26539] ? devkmsg_release+0x11c/0x11c [ 504.801291][T26539] ? show_regs_print_info+0x12/0x12 [ 504.806481][T26539] should_fail+0x6fb/0x860 [ 504.810894][T26539] ? setup_fault_attr+0x3d0/0x3d0 [ 504.815540][T26538] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:26 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x3f00, 0x0) 12:44:26 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) r4 = syz_io_uring_complete(0x0) ioctl$HIDIOCGVERSION(r4, 0x80044801, &(0x7f0000000040)) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioperm(0xfff, 0x8, 0x100000001) 12:44:26 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5295, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:26 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5868f5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:26 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x7, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:26 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x53e8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:26 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x557f, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 504.815907][T26539] __alloc_pages_nodemask+0x1ee/0x7c0 [ 504.835466][T26539] ? __kasan_kmalloc+0x129/0x1c0 [ 504.840400][T26539] ? rawv6_sendmsg+0x1b00/0x2cf0 [ 504.845327][T26539] ? __sys_sendto+0x4f6/0x6c0 [ 504.849992][T26539] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 504.855536][T26539] alloc_slab_page+0x3d/0x3f0 [ 504.860207][T26539] new_slab+0x97/0x450 [ 504.864273][T26539] ? check_preemption_disabled+0x15a/0x330 [ 504.870068][T26539] ___slab_alloc+0x2e0/0x450 [ 504.874651][T26539] ? __ip6_append_data+0x285e/0x3a90 12:44:26 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x582d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 504.879932][T26539] ? __ip6_append_data+0x285e/0x3a90 [ 504.885209][T26539] __kmalloc_track_caller+0x29d/0x2c0 [ 504.890573][T26539] ? __ip6_append_data+0x285e/0x3a90 [ 504.895852][T26539] __alloc_skb+0xd1/0x4d0 [ 504.900173][T26539] ? skb_put+0x114/0x1e0 [ 504.904410][T26539] __ip6_append_data+0x285e/0x3a90 [ 504.909525][T26539] ? __ip6_append_data+0x2231/0x3a90 [ 504.914809][T26539] ? ip6_setup_cork+0x1470/0x1470 [ 504.919842][T26539] ? ip6_append_data+0x2c0/0x2c0 [ 504.924775][T26539] ? lock_sock_nested+0x27a/0x310 [ 504.929789][T26539] ? xfrm_lookup_route+0x5f/0x170 [ 504.934804][T26539] ip6_append_data+0x1ad/0x2c0 [ 504.939696][T26539] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 504.945002][T26539] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 504.950371][T26539] rawv6_sendmsg+0x1b00/0x2cf0 [ 504.955129][T26539] ? compat_rawv6_ioctl+0x10/0x10 [ 504.960145][T26539] ? selinux_socket_sendmsg+0x11f/0x340 [ 504.965690][T26539] ? memset+0x1f/0x40 [ 504.969660][T26539] ? inet_send_prepare+0x1b7/0x470 [ 504.974759][T26539] ? inet_send_prepare+0x470/0x470 [ 504.979858][T26539] __sys_sendto+0x4f6/0x6c0 [ 504.984353][T26539] ? __ia32_sys_getpeername+0x80/0x80 [ 504.989713][T26539] ? vfs_write+0x427/0x4f0 [ 504.994116][T26539] ? debug_smp_processor_id+0x20/0x20 [ 504.999479][T26539] ? __ia32_sys_read+0x80/0x80 [ 505.004233][T26539] __x64_sys_sendto+0xda/0xf0 [ 505.008894][T26539] do_syscall_64+0xcb/0x150 [ 505.013368][T26539] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 505.019230][T26539] RIP: 0033:0x45e149 [ 505.023091][T26539] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 505.042667][T26539] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 505.051054][T26539] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 505.059018][T26539] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 505.066974][T26539] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 505.074915][T26539] R10: 000000002d580000 R11: 0000000000000246 R12: 000000000000005f 12:44:27 executing program 3 (fault-call:1 fault-nth:96): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:27 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:27 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d586a48, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:27 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5832, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 505.082952][T26539] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 505.138610][T26574] FAULT_INJECTION: forcing a failure. [ 505.138610][T26574] name failslab, interval 1, probability 0, space 0, times 0 [ 505.157879][T26574] CPU: 1 PID: 26574 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 505.168038][T26574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.176109][T26576] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:44:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x4000, 0x0) 12:44:27 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = signalfd(r3, &(0x7f0000000040)={[0x7fff]}, 0x8) ioctl$KVM_DIRTY_TLB(r4, 0x4010aeaa, &(0x7f0000000080)={0x6, 0x8000}) 12:44:27 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d586d2b, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:27 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x58e5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:27 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback={0x0, 0xac141403}}, 0x1c) [ 505.178081][T26574] Call Trace: [ 505.178096][T26574] dump_stack+0x1dd/0x24e [ 505.178111][T26574] ? devkmsg_release+0x11c/0x11c [ 505.195823][T26576] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 505.199438][T26574] ? show_regs_print_info+0x12/0x12 [ 505.199453][T26574] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 505.224901][T26574] should_fail+0x6fb/0x860 [ 505.229308][T26574] ? setup_fault_attr+0x3d0/0x3d0 [ 505.234404][T26574] ? __alloc_skb+0x88/0x4d0 12:44:27 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xa, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:27 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d586dde, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 505.238901][T26574] should_failslab+0x5/0x20 [ 505.243422][T26574] kmem_cache_alloc+0x36/0x270 [ 505.248174][T26574] __alloc_skb+0x88/0x4d0 [ 505.252492][T26574] ? skb_put+0x114/0x1e0 [ 505.256726][T26574] __ip6_append_data+0x285e/0x3a90 [ 505.261835][T26574] ? __ip6_append_data+0x2231/0x3a90 [ 505.267117][T26574] ? ip6_setup_cork+0x1470/0x1470 [ 505.272125][T26574] ? ip6_append_data+0x2c0/0x2c0 [ 505.277047][T26574] ? lock_sock_nested+0x27a/0x310 [ 505.282059][T26574] ? xfrm_lookup_route+0x5f/0x170 12:44:27 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5980, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 505.287076][T26574] ip6_append_data+0x1ad/0x2c0 [ 505.291831][T26574] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 505.297107][T26574] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 505.302382][T26574] rawv6_sendmsg+0x1b00/0x2cf0 [ 505.307143][T26574] ? compat_rawv6_ioctl+0x10/0x10 [ 505.312155][T26574] ? selinux_socket_sendmsg+0x11f/0x340 [ 505.317687][T26574] ? memset+0x1f/0x40 [ 505.321655][T26574] ? inet_send_prepare+0x1b7/0x470 [ 505.326750][T26574] ? inet_send_prepare+0x470/0x470 [ 505.331847][T26574] __sys_sendto+0x4f6/0x6c0 [ 505.336348][T26574] ? __ia32_sys_getpeername+0x80/0x80 [ 505.341709][T26574] ? vfs_write+0x427/0x4f0 [ 505.346109][T26574] ? debug_smp_processor_id+0x20/0x20 [ 505.351466][T26574] ? __ia32_sys_read+0x80/0x80 [ 505.356215][T26574] __x64_sys_sendto+0xda/0xf0 [ 505.360885][T26574] do_syscall_64+0xcb/0x150 [ 505.365384][T26574] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 505.371268][T26574] RIP: 0033:0x45e149 [ 505.375149][T26574] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 505.394735][T26574] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 505.403114][T26574] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 505.411063][T26574] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 505.419023][T26574] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 505.426983][T26574] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000060 12:44:27 executing program 3 (fault-call:1 fault-nth:97): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:27 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d586e8d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:27 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x10, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:27 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5d63, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 505.434956][T26574] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 505.468414][T26601] FAULT_INJECTION: forcing a failure. [ 505.468414][T26601] name failslab, interval 1, probability 0, space 0, times 0 [ 505.481060][T26601] CPU: 0 PID: 26601 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 505.491196][T26601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 505.501240][T26601] Call Trace: [ 505.504523][T26601] dump_stack+0x1dd/0x24e [ 505.508853][T26601] ? devkmsg_release+0x11c/0x11c [ 505.513771][T26601] ? show_regs_print_info+0x12/0x12 [ 505.518959][T26601] ? rt6_remove_exception+0x2f0/0x2f0 [ 505.524306][T26601] should_fail+0x6fb/0x860 [ 505.528695][T26601] ? setup_fault_attr+0x3d0/0x3d0 [ 505.533689][T26601] ? __alloc_skb+0x88/0x4d0 [ 505.538177][T26601] should_failslab+0x5/0x20 [ 505.542649][T26601] kmem_cache_alloc+0x36/0x270 [ 505.547383][T26601] ? fib6_nh_age_exceptions+0xa00/0xa00 [ 505.552901][T26601] __alloc_skb+0x88/0x4d0 [ 505.557216][T26601] alloc_skb_with_frags+0xb1/0x580 [ 505.562299][T26601] sock_alloc_send_pskb+0x86d/0xcb0 [ 505.567470][T26601] ? sock_kzfree_s+0x50/0x50 [ 505.572029][T26601] ? fib6_rule_lookup+0x2e7/0x6f0 [ 505.577022][T26601] ? ip6_route_output_flags_noref+0x300/0x300 [ 505.583055][T26601] ? fib6_lookup+0x410/0x410 [ 505.587618][T26601] ? __ipv6_dev_get_saddr+0x40c/0x440 [ 505.592957][T26601] __ip6_append_data+0x278f/0x3a90 [ 505.598044][T26601] ? ip6_setup_cork+0x1470/0x1470 [ 505.603048][T26601] ? ip6_append_data+0x2c0/0x2c0 [ 505.607953][T26601] ip6_append_data+0x1ad/0x2c0 [ 505.612684][T26601] ? icmpv6_xrlim_allow+0x430/0x430 [ 505.617864][T26601] ? icmpv6_xrlim_allow+0x430/0x430 [ 505.623032][T26601] icmp6_send+0x198f/0x2610 [ 505.627519][T26601] ? icmpv6_param_prob+0x40/0x40 [ 505.632440][T26601] ? __dev_queue_xmit+0x1935/0x2700 [ 505.637613][T26601] ? ip6_finish_output2+0x1160/0x1640 [ 505.642953][T26601] ? ip6_fragment+0x1f69/0x2880 [ 505.647773][T26601] ? ip6_output+0x2f8/0x420 [ 505.652245][T26601] ? ip6_local_out+0x361/0x450 [ 505.656977][T26601] ? __sys_sendto+0x4f6/0x6c0 [ 505.661622][T26601] ? __x64_sys_sendto+0xda/0xf0 [ 505.666441][T26601] ? do_syscall_64+0xac/0x150 [ 505.671089][T26601] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 505.677129][T26601] ? debug_smp_processor_id+0x20/0x20 [ 505.682470][T26601] ? icmpv6_param_prob+0x40/0x40 [ 505.687388][T26601] icmpv6_send+0x4b/0x60 [ 505.691602][T26601] ip6_link_failure+0x7e/0x430 [ 505.696337][T26601] ? ip6_negative_advice+0x580/0x580 [ 505.701591][T26601] ? ip6_negative_advice+0x580/0x580 [ 505.706847][T26601] sit_tunnel_xmit+0xba2/0x2570 [ 505.711684][T26601] ? ipip6_tunnel_uninit+0x3f0/0x3f0 [ 505.716937][T26601] ? stack_trace_save+0x120/0x1f0 [ 505.721931][T26601] ? check_preemption_disabled+0x9e/0x330 [ 505.727621][T26601] ? validate_xmit_skb+0x630/0xc50 [ 505.732699][T26601] ? debug_smp_processor_id+0x20/0x20 [ 505.738041][T26601] ? check_preemption_disabled+0x9e/0x330 [ 505.743742][T26601] ? debug_smp_processor_id+0x20/0x20 [ 505.749082][T26601] xmit_one+0x239/0x480 [ 505.753206][T26601] __dev_queue_xmit+0x1935/0x2700 [ 505.758202][T26601] ? ip6_local_out+0x361/0x450 [ 505.762934][T26601] ? ip6_push_pending_frames+0x119/0x230 [ 505.768620][T26601] ? rawv6_sendmsg+0x211b/0x2cf0 [ 505.773545][T26601] ? dev_queue_xmit+0x20/0x20 [ 505.778191][T26601] ? __local_bh_enable_ip+0x70/0x70 [ 505.783358][T26601] ip6_finish_output2+0x1160/0x1640 [ 505.788525][T26601] ? __ip6_finish_output+0x620/0x620 [ 505.793779][T26601] ? ip6_fraglist_prepare+0x690/0x690 [ 505.799119][T26601] ? ip6_fragment+0x1a6b/0x2880 [ 505.803938][T26601] ip6_fragment+0x1f69/0x2880 [ 505.808587][T26601] ? __ip6_finish_output+0x620/0x620 [ 505.813841][T26601] ? ip6_frag_next+0xad0/0xad0 [ 505.818575][T26601] ? __ip6_append_data+0x22be/0x3a90 [ 505.823829][T26601] ? ip6_mtu+0xf1/0x140 [ 505.827954][T26601] ? __ip6_finish_output+0x48b/0x620 [ 505.833205][T26601] ip6_output+0x2f8/0x420 [ 505.837505][T26601] ? ac6_seq_show+0xe0/0xe0 [ 505.841979][T26601] ? ip6_output+0x420/0x420 [ 505.846452][T26601] ? __rcu_read_lock+0x50/0x50 [ 505.851184][T26601] ? nf_hook_slow+0x1a6/0x1f0 [ 505.855830][T26601] ip6_local_out+0x361/0x450 [ 505.860387][T26601] ? dst_output+0x80/0x80 [ 505.864684][T26601] ? lock_sock_nested+0x27a/0x310 [ 505.869688][T26601] ? __ip6_local_out+0x3d0/0x3d0 [ 505.874594][T26601] ? ip6_append_data+0x1ad/0x2c0 [ 505.879499][T26601] ? rawv6_send_hdrinc+0x11ac/0x11b0 [ 505.884770][T26601] ip6_push_pending_frames+0x119/0x230 [ 505.890197][T26601] rawv6_sendmsg+0x211b/0x2cf0 [ 505.894935][T26601] ? compat_rawv6_ioctl+0x10/0x10 [ 505.899931][T26601] ? selinux_socket_sendmsg+0x11f/0x340 [ 505.905448][T26601] ? memset+0x1f/0x40 [ 505.909399][T26601] ? inet_send_prepare+0x1b7/0x470 [ 505.914480][T26601] ? inet_send_prepare+0x470/0x470 [ 505.919561][T26601] __sys_sendto+0x4f6/0x6c0 [ 505.924033][T26601] ? __ia32_sys_getpeername+0x80/0x80 [ 505.929374][T26601] ? vfs_write+0x427/0x4f0 [ 505.933762][T26601] ? debug_smp_processor_id+0x20/0x20 [ 505.939136][T26601] ? __ia32_sys_read+0x80/0x80 [ 505.943908][T26601] __x64_sys_sendto+0xda/0xf0 [ 505.948569][T26601] do_syscall_64+0xcb/0x150 [ 505.953050][T26601] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 505.958915][T26601] RIP: 0033:0x45e149 [ 505.962781][T26601] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 505.982354][T26601] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 505.990738][T26601] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 505.998786][T26601] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 506.006725][T26601] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c [ 506.014664][T26601] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000061 [ 506.022612][T26601] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:28 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5dc5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x6280, 0x0) 12:44:28 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d586fe0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:28 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x60, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:28 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, {0xffffffff, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0x80000000000001, 0x1, 0x0, 0x1}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0xff}, 0x2, @in=@loopback, 0x100000, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0xff00) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="5e1b0000000000000107000000000000000789345d90ae6934ba45ba6464b3880cf2a8606bb6424d7117830f330e7d89ab3b0127a65ae5094c7ecfa966e08b4892ddac85f19f78213a634d110d504713df1a3f0fa899e28465d3aeee58ec447bb0760a1e5d2ffad730c2b622a318b0cc304d2e62c4be8af462aa65924cdf28f76b92d6a4562c264050fcf64f610d6c0fb630d4a7d9c12b8f116f229b000100c910fe88000000000000000000000000000101020000c20400000008c9101b01000000000000000000000000000000000000000001000000000072f742aad2a92489ec7f1419fbc546c095dd22aaf2f1e836dc0d54ff786c18b100946db6ae4718067779fe00"/275], 0xe8) r4 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000040)=0x101) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setuid(0x0) quotactl(0x80000001, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000580)="0b30e0164584288e60a879c201bbac649c2a1e624200b97df79b947dda486ec47920f8d52ab252f9981664c89241bf0e986b58129783779a5b9474b1590ad2b0aba543d352f71957082629f6e656b3d4d5b46a6130793d2b910b8c2ea8f0f6c58daaf80d8f4f6364e7bd2715286e7fe61a0653851140ff70cd60f53ce89b1579997225fac575de08323c9eeb86d1cdd62d44d71369a3a578f73c362138c4") write(r1, &(0x7f00000001c0), 0xffffff0f) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) prctl$PR_SET_DUMPABLE(0x4, 0x1) 12:44:28 executing program 3 (fault-call:1 fault-nth:98): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 506.068366][T26611] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 506.083020][T26611] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:28 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5f18, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:28 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x78, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:28 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d587091, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 506.125492][T26626] FAULT_INJECTION: forcing a failure. [ 506.125492][T26626] name failslab, interval 1, probability 0, space 0, times 0 12:44:28 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6000, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 506.166647][T26626] CPU: 1 PID: 26626 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 506.176809][T26626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.186843][T26626] Call Trace: [ 506.190138][T26626] dump_stack+0x1dd/0x24e [ 506.194445][T26626] ? devkmsg_release+0x11c/0x11c [ 506.199361][T26626] ? show_regs_print_info+0x12/0x12 [ 506.204534][T26626] ? csum_and_copy_from_iter_full+0x511/0xc70 [ 506.210571][T26626] should_fail+0x6fb/0x860 [ 506.215046][T26626] ? setup_fault_attr+0x3d0/0x3d0 [ 506.220040][T26626] ? __alloc_skb+0x88/0x4d0 [ 506.224515][T26626] should_failslab+0x5/0x20 [ 506.228999][T26626] kmem_cache_alloc+0x36/0x270 [ 506.233732][T26626] __alloc_skb+0x88/0x4d0 [ 506.238037][T26626] ? skb_put+0x114/0x1e0 [ 506.242251][T26626] __ip6_append_data+0x285e/0x3a90 [ 506.247336][T26626] ? __ip6_append_data+0x2231/0x3a90 [ 506.252595][T26626] ? ip6_setup_cork+0x1470/0x1470 [ 506.257589][T26626] ? ip6_append_data+0x2c0/0x2c0 [ 506.262495][T26626] ? lock_sock_nested+0x27a/0x310 [ 506.267488][T26626] ? xfrm_lookup_route+0x5f/0x170 [ 506.272482][T26626] ip6_append_data+0x1ad/0x2c0 [ 506.277216][T26626] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 506.282482][T26626] ? rawv6_send_hdrinc+0x11b0/0x11b0 [ 506.287734][T26626] rawv6_sendmsg+0x1b00/0x2cf0 [ 506.292471][T26626] ? compat_rawv6_ioctl+0x10/0x10 [ 506.297468][T26626] ? selinux_socket_sendmsg+0x11f/0x340 [ 506.302989][T26626] ? memset+0x1f/0x40 [ 506.306942][T26626] ? inet_send_prepare+0x1b7/0x470 [ 506.312023][T26626] ? inet_send_prepare+0x470/0x470 [ 506.317103][T26626] __sys_sendto+0x4f6/0x6c0 [ 506.321578][T26626] ? __ia32_sys_getpeername+0x80/0x80 [ 506.326921][T26626] ? vfs_write+0x427/0x4f0 [ 506.331308][T26626] ? debug_smp_processor_id+0x20/0x20 [ 506.336649][T26626] ? __ia32_sys_read+0x80/0x80 [ 506.341382][T26626] __x64_sys_sendto+0xda/0xf0 [ 506.346029][T26626] do_syscall_64+0xcb/0x150 [ 506.350508][T26626] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 506.356371][T26626] RIP: 0033:0x45e149 [ 506.360237][T26626] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 506.379823][T26626] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 506.388203][T26626] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 506.396146][T26626] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 506.404088][T26626] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c 12:44:28 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d587425, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:28 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6016, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:28 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58750f, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 506.412031][T26626] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000062 [ 506.419974][T26626] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c [ 506.516192][T26635] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 506.536988][T26635] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 506.556010][T26635] __quota_error: 20 callbacks suppressed 12:44:28 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x8062, 0x0) [ 506.556017][T26635] Quota error (device loop4): write_blk: dquota write failed [ 506.570147][T26635] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:28 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xb3, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:28 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x60c9, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:28 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d587578, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:28 executing program 3 (fault-call:1 fault-nth:99): r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:28 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000080)={0xfffffffffffff675, 0x18, [], 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f00000001c0), 0xffffff0f) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 506.656444][T26665] FAULT_INJECTION: forcing a failure. [ 506.656444][T26665] name failslab, interval 1, probability 0, space 0, times 0 [ 506.669232][T26665] CPU: 0 PID: 26665 Comm: syz-executor.3 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 506.679363][T26665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 506.689409][T26665] Call Trace: [ 506.692702][T26665] dump_stack+0x1dd/0x24e [ 506.697031][T26665] ? devkmsg_release+0x11c/0x11c [ 506.701966][T26665] ? show_regs_print_info+0x12/0x12 [ 506.707156][T26665] ? rt6_remove_exception+0x2f0/0x2f0 [ 506.712517][T26665] should_fail+0x6fb/0x860 [ 506.716917][T26665] ? setup_fault_attr+0x3d0/0x3d0 [ 506.721914][T26665] ? __alloc_skb+0x88/0x4d0 [ 506.726413][T26665] should_failslab+0x5/0x20 [ 506.730886][T26665] kmem_cache_alloc+0x36/0x270 [ 506.735619][T26665] ? fib6_nh_age_exceptions+0xa00/0xa00 [ 506.741133][T26665] __alloc_skb+0x88/0x4d0 [ 506.745434][T26665] alloc_skb_with_frags+0xb1/0x580 [ 506.750521][T26665] sock_alloc_send_pskb+0x86d/0xcb0 [ 506.755691][T26665] ? sock_kzfree_s+0x50/0x50 [ 506.760250][T26665] ? fib6_rule_lookup+0x2e7/0x6f0 [ 506.765242][T26665] ? ip6_route_output_flags_noref+0x300/0x300 [ 506.771275][T26665] ? fib6_lookup+0x410/0x410 [ 506.775860][T26665] ? __ipv6_dev_get_saddr+0x40c/0x440 [ 506.781199][T26665] __ip6_append_data+0x278f/0x3a90 [ 506.786288][T26665] ? ip6_setup_cork+0x1470/0x1470 [ 506.791296][T26665] ? ip6_append_data+0x2c0/0x2c0 [ 506.796203][T26665] ip6_append_data+0x1ad/0x2c0 [ 506.800935][T26665] ? icmpv6_xrlim_allow+0x430/0x430 [ 506.806100][T26665] ? icmpv6_xrlim_allow+0x430/0x430 [ 506.811265][T26665] icmp6_send+0x198f/0x2610 [ 506.815753][T26665] ? icmpv6_param_prob+0x40/0x40 [ 506.820662][T26665] ? __dev_queue_xmit+0x1935/0x2700 [ 506.825831][T26665] ? ip6_finish_output2+0x1160/0x1640 [ 506.831194][T26665] ? ip6_fragment+0x1f69/0x2880 [ 506.836012][T26665] ? ip6_output+0x2f8/0x420 [ 506.840484][T26665] ? ip6_local_out+0x361/0x450 [ 506.845223][T26665] ? __sys_sendto+0x4f6/0x6c0 [ 506.849867][T26665] ? __x64_sys_sendto+0xda/0xf0 [ 506.854686][T26665] ? do_syscall_64+0xac/0x150 [ 506.859332][T26665] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 506.865374][T26665] ? debug_smp_processor_id+0x20/0x20 [ 506.870712][T26665] ? icmpv6_param_prob+0x40/0x40 [ 506.875615][T26665] icmpv6_send+0x4b/0x60 [ 506.879829][T26665] ip6_link_failure+0x7e/0x430 [ 506.884574][T26665] ? ip6_negative_advice+0x580/0x580 [ 506.889830][T26665] ? ip6_negative_advice+0x580/0x580 [ 506.895094][T26665] sit_tunnel_xmit+0xba2/0x2570 [ 506.899918][T26665] ? ipip6_tunnel_uninit+0x3f0/0x3f0 [ 506.905183][T26665] ? stack_trace_save+0x120/0x1f0 [ 506.910183][T26665] ? check_preemption_disabled+0x9e/0x330 [ 506.915880][T26665] ? validate_xmit_skb+0x630/0xc50 [ 506.920977][T26665] ? debug_smp_processor_id+0x20/0x20 [ 506.926323][T26665] ? check_preemption_disabled+0x9e/0x330 [ 506.932016][T26665] ? debug_smp_processor_id+0x20/0x20 [ 506.937357][T26665] xmit_one+0x239/0x480 [ 506.941484][T26665] __dev_queue_xmit+0x1935/0x2700 [ 506.946501][T26665] ? ip6_local_out+0x361/0x450 [ 506.951238][T26665] ? ip6_push_pending_frames+0x119/0x230 [ 506.956842][T26665] ? rawv6_sendmsg+0x211b/0x2cf0 [ 506.961754][T26665] ? dev_queue_xmit+0x20/0x20 [ 506.966406][T26665] ? __local_bh_enable_ip+0x70/0x70 [ 506.971576][T26665] ip6_finish_output2+0x1160/0x1640 [ 506.976747][T26665] ? __ip6_finish_output+0x620/0x620 [ 506.982002][T26665] ? ip6_fraglist_prepare+0x690/0x690 [ 506.987344][T26665] ? ip6_fragment+0x1a6b/0x2880 [ 506.992162][T26665] ip6_fragment+0x1f69/0x2880 [ 506.996813][T26665] ? __ip6_finish_output+0x620/0x620 [ 507.002069][T26665] ? ip6_frag_next+0xad0/0xad0 [ 507.006803][T26665] ? __ip6_append_data+0x22be/0x3a90 [ 507.012073][T26665] ? ip6_mtu+0xf1/0x140 [ 507.016198][T26665] ? __ip6_finish_output+0x48b/0x620 [ 507.021462][T26665] ip6_output+0x2f8/0x420 [ 507.025776][T26665] ? ac6_seq_show+0xe0/0xe0 [ 507.030250][T26665] ? ip6_output+0x420/0x420 [ 507.034724][T26665] ? __rcu_read_lock+0x50/0x50 [ 507.039459][T26665] ? nf_hook_slow+0x1a6/0x1f0 [ 507.044119][T26665] ip6_local_out+0x361/0x450 [ 507.048698][T26665] ? dst_output+0x80/0x80 [ 507.053002][T26665] ? lock_sock_nested+0x27a/0x310 [ 507.057998][T26665] ? __ip6_local_out+0x3d0/0x3d0 [ 507.062906][T26665] ? ip6_append_data+0x1ad/0x2c0 [ 507.067811][T26665] ? rawv6_send_hdrinc+0x11ac/0x11b0 [ 507.073067][T26665] ip6_push_pending_frames+0x119/0x230 [ 507.078511][T26665] rawv6_sendmsg+0x211b/0x2cf0 [ 507.083248][T26665] ? compat_rawv6_ioctl+0x10/0x10 [ 507.088243][T26665] ? selinux_socket_sendmsg+0x11f/0x340 [ 507.093760][T26665] ? memset+0x1f/0x40 [ 507.097713][T26665] ? inet_send_prepare+0x1b7/0x470 [ 507.102795][T26665] ? inet_send_prepare+0x470/0x470 [ 507.107893][T26665] __sys_sendto+0x4f6/0x6c0 [ 507.112379][T26665] ? __ia32_sys_getpeername+0x80/0x80 [ 507.117728][T26665] ? vfs_write+0x427/0x4f0 [ 507.122131][T26665] ? debug_smp_processor_id+0x20/0x20 [ 507.127486][T26665] ? __ia32_sys_read+0x80/0x80 [ 507.132225][T26665] ? do_user_addr_fault+0x552/0x9f0 [ 507.137399][T26665] __x64_sys_sendto+0xda/0xf0 [ 507.142050][T26665] do_syscall_64+0xcb/0x150 [ 507.146528][T26665] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 507.152392][T26665] RIP: 0033:0x45e149 [ 507.156256][T26665] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 507.175827][T26665] RSP: 002b:00007f336c0e4c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 507.184206][T26665] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e149 [ 507.192157][T26665] RDX: 000000000000fffd RSI: 0000000020000100 RDI: 0000000000000003 [ 507.200110][T26665] RBP: 00007f336c0e4ca0 R08: 00000000200000c0 R09: 000000000000001c 12:44:28 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5875c2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:28 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x635d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:28 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xfc, @loopback={0x0, 0xac141403}}, 0x1c) [ 507.208056][T26665] R10: 000000002d580000 R11: 0000000000000246 R12: 0000000000000063 [ 507.215998][T26665] R13: 00007ffc48caa51f R14: 00007f336c0e59c0 R15: 000000000119bf8c 12:44:29 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6400, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2fc, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d587800, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 507.321260][T26663] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 507.348773][T26663] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xff0f, 0x0) 12:44:29 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x64b0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x300, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d587875, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = socket$inet_icmp(0x2, 0x2, 0x1) listen(r4, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rxrpc_congest\x00', r1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0x8, &(0x7f0000000400)=@raw=[@jmp={0x5, 0x1, 0x2, 0x2, 0xe, 0xffffffffffffffe0, 0xfffffffffffffffc}, @ldst={0x0, 0x0, 0x6, 0x2, 0x5, 0x2, 0x4}, @map={0x18, 0x3, 0x1, 0x0, r3}, @generic={0xe2, 0x9, 0x0, 0x75, 0x3}, @jmp={0x5, 0x1, 0x1, 0x8, 0x9, 0x4, 0x8}, @map={0x18, 0xa, 0x1, 0x0, r1}], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x64, &(0x7f0000000480)=""/100, 0x41100, 0xe, [], 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xa, 0x5}, 0x10, 0xffffffffffffffff, r3}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x280800, 0x0) r9 = fsmount(r8, 0x1, 0x8) ioctl$KVM_SET_TSC_KHZ(r9, 0xaea2, 0x5) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) pwritev(r7, &(0x7f0000000300)=[{&(0x7f0000000040)="e041a825393c982f4ccf0e6e959caf8fc8e27e54ebf772d0ecda1b9cdd4c1e9218dc27ec45663f48d76686fefac8f7878846c46d9e7024252f6c8d88af53dc629d83c3ecb31e5f1f4fcc1bd0fdd9d8c712d778dff12c80b7539f9b7aad30b9d8ff37ce9d1c14d68fdc6faa44ded48d22c42b35e5f2d88f56d45e3d959e0c62ac959c9dba13f274f7fe5375116ec75e19e6ffd0912c36763ce645ee3c774a1f1a38c52757a1f894d84f3b39afc8003f7e053b14d02da0b800e99df7cc66dc519948d9948a37166cae37a003efe507", 0xce}, {&(0x7f0000000140)="c563d13cc0853ff5004441da463199f04f744c7aa79343891c0f8e87a0f7abea138a6688c41cdd0e33db795c92c6d0084d5fa0ae79233f84426db4eecdcb33bda690e99bb07a200caa3f8376d8d1bd107271868a85be2654420e194bd4bfaa2d646f0e26828429f360348fea6103aea852838425b5a5140f0af50de33ef64274405ad002bac7ee2c29933d84", 0x8c}], 0x2, 0x9, 0x380170b3) 12:44:29 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6547, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 507.367975][T26663] Quota error (device loop4): write_blk: dquota write failed [ 507.375619][T26663] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:29 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5879bd, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x65fa, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d587b10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x68ad, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff180202ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 507.460302][T26703] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 507.482139][T26703] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 507.533250][T26703] Quota error (device loop4): write_blk: dquota write failed [ 507.553827][T26703] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 507.572715][T26703] Quota error (device loop4): write_blk: dquota write failed 12:44:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x8062b, 0x0) 12:44:29 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d587da6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x445, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100700ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x68f5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 507.581204][T26703] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:29 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000180)=""/268, 0x10c) 12:44:29 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100302ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d587f55, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x500, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6a48, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 507.672527][T26735] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 507.682989][T26735] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:29 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d588059, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6d2b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x1000000, 0x0) 12:44:29 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100402ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x531, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5880a8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:29 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6dde, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 507.724365][T26735] Quota error (device loop4): write_blk: dquota write failed [ 507.745861][T26735] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 507.843847][T26768] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 507.856541][T26768] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:30 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r2, &(0x7f0000000200)=""/250, 0xfa) 12:44:30 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5880fe, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:30 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100502ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:30 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6e8d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:30 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x598, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:30 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x2000000, 0x0) 12:44:30 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6fe0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:30 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5884ed, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:30 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100602ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:30 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58858a, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:30 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5c8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:30 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7091, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 508.572776][T26785] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 508.597476][T26785] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:31 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100702ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d588640, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7425, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5e4, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x3000000, 0x0) 12:44:31 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x750f, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58883d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x9, 0x103002) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003180)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000008}, 0xc, &(0x7f0000003040)=[{&(0x7f0000000300)={0x13cc, 0x1f, 0x2, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x54, 0x1d, 0x0, 0x1, [@typed={0x8, 0x8b, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x47, 0x20, 0x0, 0x0, @binary="40d365576be59dcd2b9c05e3e0f27cc3a4b1d784f43f615e3228ec33002b1c92fb78cc65ec0acf75bef8fd93194d38d1b61d5c79e728884c584926ce73cbcf72159b8b"}]}, @generic="fae0a457dca9911b9f716eaefe95f7add12abed6f9d5f32ab43e748f79820a26d5e125ddc0f08b0b8fbc6dfef7afb92b652c6f0db499e57a88b484a6af13b12c26f9f54cacf9c1257559e2263de93dad74664de929bde06726ee0db9f0597d6d98660de10888340e37a52eb4c8c8521a6a37cb29b9830a8fab72a30253a797536585b9b8615d66a898a620565655cbcefd2385dacc071e5902aba83c280752a42b0c1d", @generic="4e8c09c118b25e2a9010cc99ac583da7665a7aa1f9afbbc13420a07f32c9d706d878fee6d838e2a4e91dc1e5f06f42128d963f740646fab861d6fc970de428048348f2d9358c3a404caab33a201dab0eabe25bc318a061a8d0c76f3138a42ce201933f6a73f080139405e4f7faf6d0467803e5de0ad0af62a2569091", @nested={0x12e, 0x27, 0x0, 0x1, [@typed={0x5, 0x2c, 0x0, 0x0, @str='\x00'}, @generic="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", @generic="27d5119252e66eae5cc10bb711eb10b650745e4791090b1c028ebd89bd20746613bcf28b296fc3e6", @generic]}, @generic="6050f1cc99de097d3b297209802d9f01ba899a88edd57e90c4afe4875fd7d00438b8ef50238b9f6c20ef8aebb4e8c950699fc7f460a70319ea9369cfa83ae52e3ae5fc8caaa5ef4972ce8548b2c4e5ab97f022886d85cc572c1d8e3a503f282183cb8f182688d4c3ec0ad42b818363692f5d4f9f3dabde8977999eb30d3a1bd159e2b38039b7f6a75cfb89a20776f81332d174144735ef733f72bd107fd68f75d8aaaea4ad1dfbe2f0170edb1b0866b5a815da69e7be79105a68", @nested={0x104f, 0x38, 0x0, 0x1, [@generic="76a3b85ae8d0fdb0353e0ae1498d37f55a73923a8f914cf386451b010b9dcc9233186197e228632096f312138cffa839dad28b34c762b59f2207a57e2fe20c3d03c9cb", @generic="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", @typed={0x8, 0x43, 0x0, 0x0, @fd}]}, @nested={0xc, 0x39, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @u32=0x1}]}]}, 0x13cc}, {&(0x7f0000000080)={0x44, 0x11, 0x400, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x2c, 0x32, 0x0, 0x0, @binary="e2f88bb0f40c1146c59b84ed45ac14216cc41f76212d2dfe26fe8607e0b28aa1bdeda93c4cc1fe52"}]}, 0x44}, {&(0x7f0000000100)={0x9c, 0x2f, 0x10, 0x70bd29, 0x25dfdbfe, "", [@generic="f2f699a68d2bb051886f4b5704ca82be97ec97fa31bf9014c10428c095e3482b060e6625d3146893e5ebd401f7a574b781e4e687", @generic="c5e00346dfee9cd9396d3073b5b698d8dca2824c952e1e78e4706d5499a2d1eb9ed9c8390765deb7cf46b3f826544635299f27b6ba0aa9a5fe4a7263441462c821e0f6af626409f291440bd95d7cae2e67a93c2c1b"]}, 0x9c}, {&(0x7f00000031c0)={0x120c, 0x30, 0x4, 0x70bd2a, 0x25dfdbfc, "", [@generic="4c9d60dd77c86ca6290f62bd1071050b2d270a54c6ea33bc13d71f8c8044d01467313fa809e9f6d23869b52b6513c1093f6c44cb8076d68b60cec9775160dd5cd66c3875bf261e41c678d3e8280715d87143cb10ebf2e33b9b9a0d551883fa8c82084182c41b8e5ed4c019271d283cfdb15e87e3ff8ce8b8f00fa25ba2e0ebe6ce6187bd28b6144a3e52e425a911a2b8aed9e7c06bc6e71b7d91b2abedfa9a81bfe1f3a1a3b730c2e2d80c95c8f163a3f8fb888ca1d55743dd355865352bae6fa6577acb80d79b57c3dcd89552e31c5c551d93e56cdc6d4677dd9a6e398e5f0243ccaa8ec25833e345d849489b793468d1f14ab1bdac1c7751db4098d5170c66855e68cd78b48bbc9d6cf3a89a5d44f2456634af9407b8f800ac972431d6acb40a58604a2e722d25dfd4e6bf3994e411fa0ed209b65e574cb6313ef4df805d28d45991b5454e8d094b2b6639ed83369ea74eee9af0de9f1d74698db7833db7510f37841f9e14d4dbc74b8e1a665e4896106f4eed97e688527e4ae146551c4f3b83b83f396da149d5612c5b6359f4aa48278d13c443f6c918a4065e01dae68f20a46fa95dec39a6094293a99c6a8658ab06eb15e6983d5dbdee932995041448676e7ab91f7939cf88026d4a1a695deb4352ee8380d9e6fd6e6c2c6fbd8026e51301cad515ca5264ffc1cda37a72806e4e9e1d0518be350eea7b1db5ebcbe70e638749d6ba1e1246be483d7a19600e1f71453d2daf8171dadf02d39693cf50174e9ceb647f21f84bcc5bc8ce771ae03911bdfceaa45608d0aad30e3b8ffc66afa7d595b2874cc6939d75451672bce4486e247fa5c384636bcb7b088d69cc87d8833c082b65635d84c82cd6279e288849e5781a8c4b09d2d0e7b3e7d80f5f3773afc7501857d68db8c1bc3376475a17268ea7c784bfb0442daaa42aa4adc3365181b46002d2eb62388f9078ef8708f0be00646f80954fd07541a34fe8c11f6513dbb4476eda01269b317e07bb47bd4012fac6f55db9ac61f1bf98a4c8edfb5544baa4daacab37ee313cc1515119cf23de93ede88a40dbb16de290747890740c012d2f91bea9cfeef8f0c288b27edc2e8b075e0fd6788f755623f4a1a2b0440e7ec6c9bf08ae871cc89ebcdb69e877ecac6d6c30d1d05b8f3fc3a9f537080679e27cdd688bacfd89eb15821c57d60830cf81991f467033683ee579b6ddeb89c84bcecc8d4d1e77101f09386fb027c6117a1ee970b8c06c1b568475c4fa5875d53d533ed864babe36f7b0bb99a612a343486ebe9a5acfb62dd96ff2fa2856c7b73ffae8397cc90e3d4e78d60b639231fad5f9cfa3fbf3b08b7facf91e2f73c5c041ce37e98e1fa923ab3c8d326a4f2067fb244b023505c18a781a7c5f4e10640d7c95b3052fcb5af53753ecf40822e1a59e6c47b79ff0a20006d54320522b005e4483039646777981bbb0753910e317cdb80819457756e62dace683ec1db6932596fa81182f4fb15ffe59903fbc0c0e3052d0b44c40e295848b35ca2c98ea0f5c00ae3741459b23bf8e00904d6fa98975c88099e38049e20b746733380823be179456cb6fd9648379278622f4cf3efaa93a900bfa3cce8f52f022ddce028078de6017094ef0d9b8b8e8b14d443c1538afe6fb50287dbbc38ee0cbbff628a37953eb1e037021a6954acb4fb5086ce43b1025647a8efc012d7909ca816374301a097d1101fa085e513553ab8220bd57fc0ea5b9e8c33498f17a0b5f246642ca879317c374635a0c937a4b344ef3a7a8278a9b245c37c4df1087a0db7e91a1cc58332753cc49898b52da90974d33a75b1bbe5ea9f3842c9547eec35f005efb2f482ba86c4f871f797c825f2aed3e33dbf7a51f5cefdfd1dbb0a21e97fe592cb76252eaf6ab61f877d1c6c14c871b45670deef0ed97c282204d91a21f7509dde4b68ba3f712588c5038dafc36f0e5b6e551491ef365a1e769dad99c1b28c5a4134d786f035014a8c3eb58f0acfd46b7796c244bcc47da1f4b69f77b92a6854d428f1b2cc463dbd47b45aea463e816cd31d348d4843d49e1550fd32f450592f4f6ad86def2f1c7ac74114c834139328b3a4195276782b9ba757aa7bac96f7d79322c3962e3924d7ef2cfe92bc6f8cb78e50dcf01d65ecf33113a6ce93d2e76496e5f6785835dd901d31c5eff76e6e223d3c72e2cf6f6c83d3a16d1868ab67da66c1c5c8d969281a3d6b9f32b51926aad1b97444ff46f858ce103f49cdc8a3c4f98e8733ad2611eab2cd1e8f60b8b077b0e5d01be31ae4b519a78d89c046cd94745c65271f384dd3afca20841175985ecf5b16e93bc3d8aae727ee4c080220e9b490ae843a00b94f198c8d9332d5be4d1b2439f49245090f73d47778ebbd89630c6d66cd3830e8c76420bf8f80bdf162ed6b8579cc6a8e425b686b916d79bf1398b49689ea0f317ae64ce365a5239d5d1ee9fe817eaec2d963cc7016f600f3cb20319a2ac31b57293732d6358080eac92b1e11334b20b10094280b0b4eabd216ef139f8ed04467f75c85b05bc9f469b5b847e84cbff125adb2e4d252981d95b123edc45402df1ff278e706a7d08ab73d4a27ac116765ac61a9451c45250b7d43434aeaf08c457ca911f5b4e29eacf31e476228497970a26febbb371c3749c2dd3d44184548b7b38d6a374086fea371435620425fb6478b07381eb6567417554b535205adbe3445d032af5dd0faebf56e993ef2a44337fdd70a23be7703186889c33052e96f4864808c80408c415d61efe3eb5c65a6a4590adc3d4ad176e15bdfae4615b4fae1e34345e9183ef06bc52d68bd5675b0441da80893d6b528317dee81e660fec68ff95f08295b7ae6ca6c7b61e28646ff40cd5befc6ba8f5ff8d5bee21cd0dd8988ee08b4ef124139c008b52423a0d7c2b4e28d4859c8a4bc2323a91080b5d76bdc7bfcfed7bd06762b3649654d304acc2e7ac75a1352a34ed8624a501dcdca5a9c3d9b9e97d7c8b4b1b30ba4204b08566938adbcc8c458c586119a043dda808f5710bfa1a1ab3e7aa56c0009b026d7b4b53b872ec75fa922667dd8051bf91bb8ee61b872c7516b6f9ac23704c7a704e4b68d03e071f91ba99ea0eeed20629fca6522a09418a31f2fb380296fa35c35f443fd7e280a0a00d31ef1d64c49027bade487f8c4fcc15c570f301b3ac53f4188c38cca7b34351031214589be17319086699327349627099ad68e8902cbdb0333cf8f6d238f924728702d78d8c8bfbe77d808217caf464b4d515bc31a77969d3807cb397120807fcaf8d3a179baad9ae7042fd8ca3bbf7dc8498032931f1234763eb5efc96efea30769f6568aff6803562357a1fa2058e33429918d68714108fb0bacd1b39993266486c8921f33af2b5cce6095336d149e4d3f3bc9e1ec8a9a81a504c3a47404334c10569fedde0439b6c4a7a47e257f2033e993b80fb13d608165500b0d8f1c7666ecee1571ffb8234a615faf09956487c89cacf8411569ec106cc50e6bdb24ea58f290cd6d87f894fdb7c167b5688108a4445258069e98c8b328fbb0177b533573ac5a937d3072fd75ce93cf79c915200c268feeb8a0cb84c874409d4ae30d3a22036041c955b53a5ba8500bfd741bd3a49a501154353e6662d0e2e45eb780cd2c99210a09303c818f1b4b1122896f70eb80164c5ec0305ddef4bc386c90f0d7bf46381219040dd8b47f8dce0914e9d57d73d5684901466744137f4778b4bfa8dc19e883aa394eda91d91461b0c5eadce67d4bfcb5c01b71e04f4bb8ef0c11d0c160e85c5a97c3e6770d92039b618a7a6e7269bbdd2e18d058319c01c7c0d8be089623f3c5cd8b880cbef0eea2e547c12829e88235ccf81e8c831f1c67ddee2a1dda26a1262b95f943212c76b01709af8fc4f29a7d946fad5a294ef03f0511b36f122c67640faa51b724d17e7768e6b2d045d35f5b143557a3f2d2743162e4bebebd057d0f2b4085e9fb24e4b5fdf23cfda22ccff5159bb98e492678160774fee29670ac5a66a0dc5aead9a7d11013d7cc6cb45bcf4871b5551be5c65557a990a22119d4639060b6c7622be0ce93aa9bbe3dcf3addf40741a843ecb15d9b6c1245aaecbe3108bfce3f5c34fbe6cef00cfa27dd02fb40d686d26d1285923145a5c5ca1eb5b7635af286101805f4ae89ea1a41937b6b6ccc4a253ced5b628a1481e464c8e4bb45216f03bfe3862220b41ce79a239c6516d68693a990b488360bbc57f0bc07b5e4f854dced1852898c6c2b694994089da0c6279e57e4d0eab45a45cfe654e06881ce167201ddbd25ae35459d02da3c2891603bb7073fdefd93ef5dafbe6b555f13378fb903a1ec0995faad5b6ba55682791760f2bef990bfead85b3f8e6f8a47edba89614fb0dbe0a710193344ee873af33f53f546aae1232455977426f0319c3235e783f8db5f8f6a77a5c7221fd2752f15293b080f76d3dbddcc9f1e8f9890932e52e9f85fda25797f00bca5bc40e36f6f229f123093b3778c2ca62b31e63327d255922d8e350ef1b22135dc167d85f7b129e7324884a6e58639205253bc8f693580b9a2fae6705c5f9205c9cd01e5f1bc658273075c3ae1c98026c01dddc5b3f1786fa80b417a6302f23993ed71c7c166d8941896075eab5d3d8c41a5fea061974d25305b8042653eb8b82992320e815226580e03a58e0e6c3debc0f6aff9b4196ceab7e5d2b4455507778840a1124721c402d81009b9f7c00887721cdb8228625a822f25b9a7b98a58102218ed1ea78b04b2a04fefe0f25a8f3b6fac5286e554e688c6b5225a09e735ed57865b45d199d9ea667d1cc264193662ccaf2efdc5a50f246ffcb564c618cb7ebbee74be3c4cacac006065e19a6861a72d5216a7943bba0d78ca01b3d74f58896a87012ea4ed276187e3d39cb88264424fa07a0de6ae889c1323172841714466ff8d31a086baddc496545881ec6ea53cf287fe0aa5bfebb1c77efe2b3aeec3b803d3191eac3ad3d5723d9d82b018c8cc4849a4d512b3ece8bc2e8ab5d895777f2fcd015b7cabbc7a129bce0a56f7131d811e5d872ff055d63b9435c6321b43d80f6d6bb6d03abd068b6c7e08c001ad08338ff6961a9c0eb12b2a9986261329522b8aba7c584000b27700106df20f4a3e6512816edcce0d06906d658e2637f782059bd4f3e7110bedb8a5b2b6396786f448acd56e8d5152dd9c5276a2cd1164a2182321980526a7be2df0ac904d214849ee36365268c5bdfc5cec410cf1b39ba685a48d19e6e82100b869ed36196ec37f799c1343549c71203cd7733e046e499662122599231fe9909b99f6f3061e1052e6982dc4dee994d6147079c1f0ed1b5af9337b5d79d85f0de25b3265a75794fee9ea0640e0f1cd0153b74c8f44d15ea4d2c5cf9c963cab2f3140c5703c01c5c9c2ec4c7a90fd655f74f91c1a69e90cdcea93044f339572d8ed97df179fb24213f5dd231fb8489a5511cce6e11bb23b40e5b547c7fce3302747327944e353af6af81a3b1c039575310df742759cbab773d0a71102c0f3160b0a45eb63ea5423c888a595891d540bc3d38b5a080b40df1f34e9cf2c9041642afd960c7e72d5a8e6cee3a54a0a6fb8d6e3d7a8662a95317a62cb54eded7d785e3c3ccd436770ff0b52e83b726ecd70e7c5dab3f72d4f4c1af5d4d1e4dd3e86d79d59a9d7574ac11635811ffb4e2234498d50fecd0bc18ccc416b566a118b95a5367a62142a628448ad1feb0f8923e5c7c7f41f09a50fd0ff75fb08bb3e185354f53743f511a9239e454cd3a63b2ed8ce4", @generic="6f17078b557048cd3257eb20bb3cd8af8791f25ff64d8adba0f2f473a57dbb30a06636a45e70efbdf4a8c1e1c82af5f96f9d47e838a8a8a5a8be9dbec45d1e851da5ad2df280975a7c7c01f87ccdc01996cbfd848823e2e310326d9519f301c1d8f3e2c2325f46c65b3ca6a872041841a09b859129f2b7fd9b8aef28f45972c32819c37c47179500d9a0b122fd6f435aa6", @nested={0x168, 0x2d, 0x0, 0x1, [@generic="8bba1cae38b5f02f4a737dc12837abb298d7880fd5eb43394c7db335f36301c132a140c66f8bbecd93957292521e5e0524a29e13bee441b6b0277cdcf2fcf87e28", @generic="3d7c61919ed2a29d1f7ba349e21b53a2878687f5a8b893e6d47af38902c686558536b3f95b07ad5f6b624bf6458493b7f2501d36f5d84c96bccca44c67c3d8f8bd5946a2f32d03617825e2d39958a316a519b52542fed5fdcc1178d71d3cf3e9478488941495a27209737190d3d1b5224639024a5b", @typed={0x4, 0x3b}, @generic="3d253fd0f754fafdf790250b84c5d7f091bf", @generic="414be5e1f7c541722afdc44f94ec7d6f37cccf8c649c1cedc1f9631073feeac9563931f4c20271979d2551ce8b45d9e06fb34d1f59e6ea715b547af279baa4cb0e9768f3e9eb4e7808c4e3dc3787e86f7d3a09a5b19b936827f3c91a2abbceea13384daccd429e2801bd11fbe8e365755ab3ca82db42f5ecaded4c6c17bf2289c889f6891fa68e5ac5777c483752f6d6", @typed={0x8, 0x33, 0x0, 0x0, @u32=0x10001}]}]}, 0x120c}, {&(0x7f0000002940)={0x10, 0x1a, 0x2, 0x70bd29, 0x25dfdbff}, 0x10}, {&(0x7f0000002b80)={0x494, 0x36, 0x100, 0x70bd28, 0x25dfdbfe, "", [@nested={0x1ae, 0x8b, 0x0, 0x1, [@generic="3bf9941bea3f3be7f2adb133c2ce24877af883cb0e53ba9a4aac855f9338d1656df4e8b66e3257e93527b7610d0fc16c99190dc2b00a374ea75ba810c9439dd8fbf0ece1dd2a0f766359a85c26bdc3a4ede52c248abdafbb859d173508c0aa8f3eb56c050c3268943c3521eedb9208baa21ec6ec3206957c96b8445ce9d5ec6decee2dc3d4d65791e244f6d38b7a1af6a6b16d1d68e7508a570235f684531dda92527b431f1a3d34a6028d41f77d45b9fa8838ddc07102d9a3510830dc7a2f37c67d95b92c590d97", @generic="ac88931b7d632f8c8f078377270507070fe304f50d79598b2315d6ab5d627ec4328da855cb3d103d96077a1896ea213d4feabaa17342dfde4e9b23add591041cae04a1dbf2f4063d509a044cda4bc6353a329e7ae987d278255fd9da240478f53a2161429aeb9ede8eaabe43836c57beb7d94ab2d7fb9690a4c21584deca792096a99ba8b5b25af3bfbd27b8c15e64d4602f413159e5294d9c12d097f8ccda136eb9c3efb1c97ffca7a8e78276adb7a55f3c564f25d3ae4c72d1a664b2be0258db75cd47547b7b8590a8b8bd6c3664ab46ad4d97f9fdd43cd518", @typed={0x8, 0x65, 0x0, 0x0, @fd}]}, @nested={0x8e, 0x47, 0x0, 0x1, [@generic="7d8ac1ee03016ec69066cd89e916b5f4170a221dd63970f555fb5839285001b5814e33d088f17f81809feac91ee5ed61f9ee764bf9722050e3c092a62115f7bebefbd26d2f951d0cf318aaa0421fff775bda27bdb3b2c3a0a363d7edee4810c0c078a593364289902bb939d7c595c1be25994a11e1043f5dddc6", @typed={0xf, 0x90, 0x0, 0x0, @str='})\x95%-@},:/\x00'}]}, @generic="285da6b1356adaffd0b79d6519b26efdc2e93ee070fc7c09f40b0e6613221e13a64345685c63bab82f20c6dfc0d10370f285de2af8c693c78490657e744f5e92ff4c0e1c47f752e026d6907ed8332339b52e7a7ec11340908ed6ee8068824077a79087a7405e974694e3b2bc64f248a4dfbd66613572096d6090722b4c7fac5603e25330c56d4e0dbc98", @typed={0x8, 0x2f, 0x0, 0x0, @pid}, @nested={0xc, 0x82, 0x0, 0x1, [@typed={0x5, 0xd, 0x0, 0x0, @str='\x00'}]}, @nested={0x19f, 0xe, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @fd}, @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@mcast2}, @typed={0xad, 0x26, 0x0, 0x0, @binary="3d507ecb8e5435caf16f5b9a8b5b07e92514fc8540e0291d823d0f5c1cf3fd21d5be7fce84331200e7bf842efcbdbdc6c8589e38271a8a72798d859a3ff01334cad7ae2cc60a972bc0516b78ed2d134e44c8cc0ac4f0dfd556d38d36de1489735e89dcc7f092b9a4424cd9465bdd4f88cb230c0c37e91754b2ca475e021140e09edd91a2374d3b1335c8cfb9ca33efbaafb3243e503d00e7691a81d9a0f391f36a8fb556d4d1c12783"}, @typed={0x8, 0x24, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x8c, 0x0, 0x0, @u32=0x800}, @generic="1525a73f2765c71af2cbc072079a374ac7d2222dd2d1916843a9bb67d1534a254a8d76110d0def97ffb4c41354c4940e72fcd47b38b97eb9fe10f670228b7854829a14d463219caae33996d051c12d5ddf1ad51deb04a5028bd3085fdf9c1a59317d4c5cb95321ab779f14152512991de79d1d316e45dce01c41a288b7d6010d65a2a51e94b83bacea7902759fefaf8cf438a7e84d124c5c9d694dc46d9baeb051b2ec6879f1f5cb118b6870f1a1467578a90830068232657d078969ca15c0"]}, @typed={0x4}]}, 0x494}], 0x6, &(0x7f0000003100)=[@rights={{0x2c, 0x1, 0x1, [r4, r1, r5, r6, r2, r2, r3]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x60, 0x240c400c}, 0x20000000) 12:44:31 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x600, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100802ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 509.399091][T26818] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:44:31 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7578, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5888f0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x75c2, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x4000000, 0x0) 12:44:31 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100902ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 509.436663][T26818] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:31 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x700, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d588a85, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7800, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x897, @loopback={0x0, 0xac141403}}, 0x1c) [ 509.549527][T26852] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 509.570144][T26852] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:31 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) accept4$unix(r0, 0x0, 0x0, 0x80000) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fedbdf2525000000e08702ee767fde5a657673696d0000000f0002006e657464657673696d30000008008c0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r2, &(0x7f00000001c0), 0xffffff0f) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:31 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d588bd8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7875, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x900, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x5000000, 0x0) 12:44:31 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100a02ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x79bd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d588d6e, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x9dd, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58901d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7b10, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:31 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100e02ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 509.748580][T26871] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 509.788247][T26871] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:32 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400202) write(r1, &(0x7f0000000040)="c4ff12164b5c276e3b6e7d9e43dba9695e9c9f679c3f0b8463c7", 0x1a) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:32 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xa00, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d589021, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7da6, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff10c805ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x8000000, 0x0) 12:44:32 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5890d4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7f55, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100007ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xb30, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x8059, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d589170, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 510.562769][T26903] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 510.596199][T26903] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:32 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x80a8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xd15, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff1005c8ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d589552, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xf000000, 0x0) 12:44:32 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x80fe, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5895b5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100203ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xdc8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x84ed, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x858a, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xf75, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x8640, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d589708, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x883d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100204ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x2b060800, 0x0) [ 510.787032][T26938] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:44:32 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x107b, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100205ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d589805, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x88f0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100206ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x8a85, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:32 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d5898b8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x10c8, @loopback={0x0, 0xac141403}}, 0x1c) [ 510.901120][T26967] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:44:33 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x8bd8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d589b4d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100207ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 510.955838][T26985] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x30000000, 0x0) 12:44:33 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000080)) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) r7 = accept$unix(0xffffffffffffffff, &(0x7f00000006c0)=@abs, &(0x7f0000000740)=0x6e) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f00000019c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000021c0)={r8, 0x7ff, 0x0, 0x1}) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000040)={{r6}, {@val={r8}, @max='max'}}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:33 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x150d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d589ca0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x8d6e, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100208ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x15ac, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x901d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9021, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x1660, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d589d36, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x90d4, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x3f000000, 0x0) [ 511.131011][T27015] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 511.152781][T27015] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:33 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100209ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x185f, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9170, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d589de9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58a09c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 511.268753][T27028] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 511.279244][T27028] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:33 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = dup3(r3, r0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4) write(r1, &(0x7f0000000040)="61a906948cc56ea0fff74531e121a34c0256e7a2bf061c8b6de78b9b119d9ab64521bd3898e166b606742c238a78a6a9e5e1a6c397d8e7e972546e2abe677fea5b275eebacfca7e7c5", 0x49) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = eventfd2(0x3f, 0x80802) lseek(r7, 0x2, 0x2) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140)={0x8001, "816e29"}, 0x6) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) read(r6, &(0x7f00000001c0)=""/257, 0x101) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') 12:44:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x40000000, 0x0) 12:44:33 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff10020aff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9552, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58a0e5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x1aa5, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write(r1, &(0x7f00000001c0), 0xffffff0f) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x25, 0x0) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000040)={0x10000, 0x4}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f0000000080)) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:33 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff10020eff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x95b5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x1bf8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9708, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x1d90, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9805, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58a238, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x598, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x203d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:33 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x62800000, 0x0) 12:44:33 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x98b8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 511.458084][T27070] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 511.485795][T27070] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 511.563163][T27090] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 511.576354][T27090] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 511.595621][T27090] __quota_error: 38 callbacks suppressed [ 511.595628][T27090] Quota error (device loop4): write_blk: dquota write failed [ 511.613198][T27090] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 511.628228][T27090] Quota error (device loop4): write_blk: dquota write failed [ 511.636043][T27090] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:34 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9b4d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x5a0, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2043, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58a51a, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x8cffffff, 0x0) 12:44:34 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58a5cd, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000003, 0x1010, r0, 0x100000000) write(r1, &(0x7f00000001c0), 0xffffff0f) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x6a}) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f00000010c0)=ANY=[@ANYRES64=r7, @ANYBLOB="040000000000000000000000000000003d0400000000000001000007000000000000004000000000000000000000000000000000000000000000000800000000000000000000000000000002000200000000000800000000000000008000000000000000000000000000000000000000b0183ba27c02a1a2ddb8ae"]) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000000c0)={0x0, r7, "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", "3f522bd7de639475f4587fe23b171179869e966adba596356da6aba4730dc25c8208685766007814b0df8b9a5a1c03bfb4e3caef5dcefe493b04a926d8cc4b8207bd53a537c88938ca66f08e1d11287d914b815c2b212212c5fcf2304fb5ff0f67017100b14f894f8c40dd1847ad67f22f257ef073a92e3c35a27dc16ad1c9ded92563cb05deb43ce339614d0d552eaa94daa3311b8e5a2f891d131efd45b2c401e85af50a47294e2eb7a0c6dfdd07da0c19e359b1435824de336f9ffdf5acaf756d764bf7702d67844cfb09c431bc33a594c07f95376e5f2e844a39a9f447b711ad51a7f1a55d01137d1aac55df44af9b9c68691e5c480251988d4562ef2a9726cc94366922dc07d02f2825a13f6d1f0e8a3db815ed5707284f72f34fbbb40c40538a75b8c730b7b2bce86966b863f42d64bf3a748af3037f307cbe94aef6a6554cf283d782ffb0089efefb673bcbe8a8349edbe134266e4a4efb398fcad3b10c4973d6e5af2839574eb09f0ddcb87522f74fce6e8c5ffccd582a15be8c527fb5fac177210cb87fe01c6415624e095ac3cdb9d174a3d32de76e67b1448ae7d9b9069febf96424301894f6b294c12e4c226530ee157b3e3e6cc665bc5e39dd5a322856e4e95d161298a55286ca6770ebe8abde79b44e024efbb151bd338412bec5a094b8dc649e20f54c77a62cf1fb66cd9a013fb73e8a1250b385e0de70d13fa0eee47c8af7093ede6589636a18fbfd8e1272b3970c6f541d052e72bbc43f74c14c3bcfc1df34a445798b7bebfc721a2f9cd03217d886800e384fbc8338e733b93b8d105d2a3713650bc18dfa00caf63a8463aa9fb0e18569943500056ca40b3ad40c7c3f75aa1ac7c9303651a0445a50a2b34e7b7be595df03f224accf393a7d8b4eb6cee6a010db59f28432c24b07637fea1e461f55f3838a423ce1add011171673f19afedb9e94d7fc85c26c0779253b63cb0d1b77e92c0bc4466894d1954e9465e23e9fcbcb7f49dead69c62b0c7fb118ca8d18994cb41567bc58934649104b76e457698ae6885cfe5e12622ea79969d1af463693283d086a74ebdeb5fc4f288f0b87e18cb9caf07965bde54bde58834896bfe21be8724d04875817c8716b045e6924c574f4a0190ef2a478f8e50981cbd1062f3f632990b2357032b384c88043c1d775da9afe28e5a59bc7e782d021a5ac6ca62d89acf350247d2497f1c2cebbcccd7cb8b1b491bad640738bb396788c216a967cd36a39bd7ff106ad84aedb186c16ab339752c86c58dd0fc4669f3dc6c340c2ea2040571787332968a0535502c2a146d05d928285aa77ad957946b6f25426c16d26ec8f118c4f961e14c29811487a3655cf37ddaad223200af38c9e62d46e9d9b9923a95f9d39bc45e00740293ad645977a68192ac90b61ed0917c91deb872b967254ef0e42e8fa3ce8ad3855cb146a66acbd34bbff35192bd8628017a587c51ff98030acd89e9a3f7e06af6831f3d6f4b48dc5d4ceefc802b01c497e13b726146fa5f1d64277b636be859d3aa835a54f34b0a036de266c99811ec9c0fbff62882a4d8308c3166d068871b49e2fa375e40bee3656bb3c79212503348253d93dd0d6b7e303769b80e74cffd1484d009f3bc24cf5b5a87b6421dc217e0d2f459c2c41d0a184f090c4437da12c4d23ee78d6502b02e51187fe1fa325b600a27383cb39f2c8828b171cb9d04e523331c9d0dc34f01cc6632c93f06eb776e78dc45fcb35d2290156a25c5a887edb5531ba0fad77f2152e915f84c3a860f25f70592c391a04ab550c77dc7305208abbb7ea63c92b4a5174d0aef0736124100363e68b5493b7827b239407af7a6dc862554452909e425fde159ec9a7bf301f79f64a8d23a9caf5822c62361212fb932dd57c420d9ccca450e8a4a65dd027574c81dec9cd8d3d1b1522bddb68e8a9aed547dc8c1c521ac7e8c6a9614b5f0cba4a5e11bf5d5758f2bdafd204ea8d2a619ea6184d3271efc6d6a7ee9365f0cecba24e7d3f026453ff2b26db2fe8ea5d653fe5a520372a6ab54620b87847139e47d9b9c91b0182447c2662351eefe172e183ce1e2b3480caac9ec3ffa2cf4f49db739dc846a4466ead9bb76ad9189f4acfe3fd38f7f71efd3f82de6666c2fac5449f96f4a530eecf0a9d61bac82516fe63b500b62a8acc9d8a55cdba0c56b9bc12dee178578ab5ba5bddc466cd0536fa36597e993c5b8b7062549e439efa3b19cf9cd1f3e0ebb448a2fd17d1e4a9afff595a503ce1078bc2f4bf8d8d504029dc197fb50013b4628cdae638e2e08e0b087d2260ec45758bc2f81a4b3be9b4cb69c1535c0dfc859c83c79f8660e9e0520f74ec3d350673eb1c2cc1ad78d4b407d6a97556cd2dbdd862c6084d5e2451eb8e0973d8f3cd74b30589dd519274b006b31d613f472d4a84ae72795c8dbf00b8c73d777c2fae26efb89a3762db5744f316f4345c0bef02ec63ce223a43e6efcf219128743d0309f03c2456171c8bb63a1e57ff289a6439c7c0812f13a3a9e3642712688d0ecaf55cf0b41b245fda6c4acdff05288381637c941f166de974dda40bef43a8b2548c7ad180bf0a58573cbcade1c31dde65712db571b9f6fa9e2679176e0156e0a057deca76335d9c948d0aa15ec9b37c75fc0c371801366a015560b497d06918ca3efeb401aa95295642b31c0ce009ec40d92d0d3d1bae52ea632193cb1797af9e9bc8fc61dc3d5008a81072886a36ca58b03de19e5823e38ae7b09b047ff198dbca897cb2afadf4bcf47843db8a52a1c15bb1ce1bab9b2dfb5d5ab489643dcb647f654b973923bed91e0c72129b893b8c067fe2764a0a67c6e56f54b59b4daa3d60f2b2397611cda9d7be9ac4dfa6b440675cef674a31460475139f5e3ca448d28fa47d06a1e78beabd82ab00cc32a90f4d39d8161751424fbbde2b51cd2454b8022e2933e2150fb9c3267f7f8d0bef569afa286d382ae471f7868b90dffb15d5836f6d37501f5cbd98ebbeb604f6fc118e27e867d8ee26c1ab8b6d575f80de064199978de5bc43c1ba1172927949c1a27ff95a91c611622e8c3de9758b794547cb499061dc5e4d4d267df12f9c0a779b52e36af978ae21fab7a86accd9a617d2e47332a02ce67423b4c4c91ab980054c3d576463eb928e83c7fdf5653b7698174c1da9e966e784e1c6c61c08e6713a5101022ceb1e9a0d9e2c2e815e4fd18faf7823aba424c2df1ccebb18ca0b687a6716c3b8bb87d4351e9466c70e9cd37328f36de6cdb8dca5f70b2930009d84d293563d17f6632fa78ca385bf227dfbe0d0ff06d41079f3a98642d2d35fadd81456a565fc4c6d26fcff88e5b7a8f4ca0ff947d71f7e8554b69aab15dd8bb97a604f9d43f09d4af3c94021c0fe264413c1f16d7fdc048b37c8920c788b727fe3024283d6b9adfacf302066c601b63b2b9e4d1d5079199c1e699eeb391eac9369deb77581bb4957d7fd73c73eebf2867dabcf7a1c5a9d561543af0459063480551c14df1b8b34d697e7c983685c9a84d14a434af2580ff814e8d136e30ad66f28b77144595bc598b9d2e8025a92339f960fd619fd6409286ea2b6af9eb6eb941a2940ec59c204c7074dc7cd69c097bba44345f0927668687b902a97d74152613e94cfdac2889269e6d70352c0b3953e69e852f9a2d5501a2208c59916975bacb888e74fe17c1f1be1b98ef597886ead58167449579f735d3acfd3be23aa974fa80a7756373e69b0cb592cae4b731a30024ceff31b4a9285d6de86c2cdc0cb58ee220e2b4696f356cd87847137c95897d49c0470ac099cc20a88f446e6468ec12a81394846beb2438090602576cafea8a83f6226e2b90c68b494965e85f5f0e9828f3af76283328c7dd7ef3b71b066b45e5c5ead76a871f01958a2dbf6fbd5e44574c93da4841f205b43740e1f59954fb57083bad4bb3723e507f965f3892e3d173162ba83f7ddb84a69595e196b8f92aced0db31ff9eeea3b2b018b97847918c1f1819c55f561faf7fe57288d3d7dc9f955e1ec83abef7aedc79ec96ec8990679baea55268df3ea27c035f31a74e72c3c67010afa85a0e1fafd874a0e6194d728bf2c3801122747935964398631476ac3d1fde43c04f74655c36555de4c119e0296a32d0a11aec12c63810c81f03dc739be2214ff570fe7ff54c95745977731ab2b416a6df977c2be0911d9fd8f3a58d124c81067c54307f91a3b750202837808f8dca6177f03ff32f4b6565dac3903aa74fcb9d3660f6a550fe368c6e43049b6a0df346623a2402039bf68ddac36008393911ab7be203e89f92eae2dccecff2e6ce504761e120e2158ce3750e610ace9e7ac7e14214ef2fcf96db3654dece5aec0cc293f53d086d105af6ae831084b62043c73f564ee76e3c8353b3263aca5816a9a3a474844a94cd5caf85ba1682f164fd3e7b930b6628cdd6fd4aa060902557c545accfe4da82fc2caf10aa61d381b6db0bfae6a7ba2d8bef03c7bd89285fe92abbf6dcf6edd1e58152508738b7a87549046035a2cd0caf1fc97a3dc9cf650200d04911e72f0a08e4a60dfb444cf4720749809e056b19292c8348495dee262487aff4ed1750f6025c987e91d3286c5f8ebf7f0a904dadeb9b6841728052726b99f434fc7bcdcf1d9811b321e7b04e5bb118c3e02e6acc91480a5ae6b6e6182bcdbd8d86902a0ceea1fa5782b74953e9093c7bd8287c7a3b7b7532c41cf933b23df0e0246adcbcaeb34df63cb014b410d6d43d1b043eadf73e1a565bd164ec02b42e0f7148549b958d65495c8b2611504256ff57f6c29b0453bbe828adf8061780956df96e801cbe63c893f3a98b6f063307354bbe989d4314d617584bede299c0905b5106472a130e67d7af8a28cdbdf7e2e6b5d495ba5bc2284eea27a043471a9b6d4f745539100e5160c8b09d85e512b088932006dee28d859c2738b6c8f745876ab3127ea0af7cc4e65cbffa1b3602db7044617cad2c67ba7d3fabc341c6826f5099e6b303d5fc5387555ef3fe648cd9f9a5faebc31bb31c6b2a950273027257e85b5c5a5b6daee7e34e8c33f854bcd429d1c70fcbb0a6022a7fca47d8e1a36aa47c182b9bc590d140066447a0738dcb27511b102dbae53fbc49415b8ec2042d46774f164239edcbe529bbe99e15246f99f17520e42e706032082c7e1cefa099c8d088d8d827e7c8ca49337c8680df71d772d89e5fb3999a1d62c204776bd8c6fc62441bb8f839b35937ed020e36510ff69a386483ad66b19e0279d23f6751ac677af0695316fb57d2557d19153075962e78a59d13101d4901c168e5f55b2acf707d7db302fb819e3ffdfaca6da3f3407e027d300a8fb334727f850fe345f209a8772233523e8eb841b5e744389acae2950356f362239f76915"}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000000180)={r7, 0x349}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055600)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "6da30b05765f70"}) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000001dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000001d40)={0x4c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24028041}, 0x54) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000c40)={{r7, 0x3f, 0x0, 0x4, 0x0, 0x3, 0x0, 0xa08, 0x0, 0x3, 0xe95, 0x7, 0xffff, 0x2, 0x100}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001c40)=ANY=[@ANYRES64=r7, @ANYBLOB="09000000000000000500000000000000ff0000000000000008000000000000000100000000000000070000000000000001000000ff070000ff0100008100000081ffffffffffffff070000000000000001010000000000001b0e000000000000300000000002c2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007b45d1731bcd958cd7922ff280c4a1428d254d1c948f6e4060320ff6467948c60607bdff14af4d"]) 12:44:34 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x5c8, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9ca0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x20f6, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58a67d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 512.295364][T27106] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 512.306012][T27106] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:34 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9d36, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58a7d0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xb30, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9de9, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2190, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58a880, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x10c8, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 512.363495][T27106] Quota error (device loop4): write_blk: dquota write failed [ 512.388551][T27106] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:34 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:34 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa09c, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xf6ffffff, 0x0) 12:44:34 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2574, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x1660, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58ac15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa0e5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58ad68, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x1bf8, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa238, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x2190, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58adb1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 512.554360][T27154] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 512.577555][T27154] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 512.611465][T27154] Quota error (device loop4): write_blk: dquota write failed [ 512.619491][T27154] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 512.651305][T27154] Quota error (device loop4): write_blk: dquota write failed [ 512.665300][T27154] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:34 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa51a, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x25d5, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58b064, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x2728, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xfeffffff, 0x0) 12:44:34 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) ioctl$CHAR_RAW_RRPART(r2, 0x125f, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:34 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58b1ad, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa5cd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x2cc0, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2728, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa67d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58b300, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x3258, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 512.804669][T27191] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:44:34 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2827, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa7d0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:34 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58b595, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 512.845937][T27191] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:34 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xff0f0000, 0x0) [ 512.952043][T27223] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 512.967374][T27223] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:35 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa880, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x37f0, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58b745, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x28da, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xffffff8c, 0x0) 12:44:35 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)="c102328113dd4d7f150d7e039d171a1ce1cca1787da8136f0578c31c41843f1df5707ec713a1d7009cb2d7114a5c83b0de94b3e0860a301204eb8019dbac66d26c4aec438b1734a583dd93bee369c51c7c3ec9b8274e8fff8239b375cbabd2112d8bca2c7721b95d3192000c5f50e6879628f9a6e7f9c04d82129c690ec07f0dac3fd5821a86437800ff3e410e96e1e8b73ebcca75b1932973459ee21d94592bacb474a703ce74e20a43599d79231f8b39dfa4b07aa2cfb227cef1c9e7a3116f5b1e0b509afd6635af1a61afa880282e0455a3dde774ea6bcbaff3") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) fgetxattr(r6, &(0x7f0000000400)=@known='trusted.overlay.nlink\x00', &(0x7f0000000440)=""/4096, 0x1000) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x100, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x18}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}]}, 0x100}, 0x1, 0x0, 0x0, 0xc014}, 0x20008000) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000001440)={0x7f, 0xbc, 0x8000}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) modify_ldt$read(0x0, &(0x7f0000001480)=""/231, 0xe7) 12:44:35 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xac15, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x3d88, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58b848, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2b6d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xad68, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 513.072873][T27241] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 513.108924][T27241] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:35 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58b898, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x4320, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xadb1, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58b8fb, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xfffffff6, 0x0) 12:44:35 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x48b8, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 513.234242][T27274] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 513.244869][T27274] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:35 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0xe9b146dca27a8f95, 0xfffffff7) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x3201, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r7, @ANYBLOB="2184c499f49ee2d2d23c091ff301008cec9c6a5b8365b07a33566de945dca011ac9634b8e4b462521797703359b2c0c165a899e6cdcb14360eeb5640c8b66afbe872a500"], 0x40}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', r7, 0x29, 0x9, 0x40, 0xffff7fff, 0x10, @ipv4={[], [], @private=0xa010102}, @private2={0xfc, 0x2, [], 0x1}, 0x40, 0x0, 0x7, 0x8}}) 12:44:35 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb064, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58bcdd, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2cc0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x4e50, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xfffffffe, 0x0) 12:44:35 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb1ad, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58bd79, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x53e8, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2d58, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb300, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:35 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58be30, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 513.955150][T27292] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 513.984531][T27292] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:36 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58c02c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb595, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x5980, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x300b, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x100000000000000, 0x0) 12:44:36 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb745, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x30be, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58c0df, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x5f18, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58c275, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 514.190439][T27325] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 514.219722][T27325] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x200000000000000, 0x0) 12:44:36 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) accept4$unix(r4, 0x0, 0x0, 0x80000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="bb010000000000000000001b00000008009a00011f0000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000226bd7000ffdbdf257700000008000300", @ANYRES32=0x0, @ANYBLOB="0500ee0006100000"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x4008095) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) lookup_dcookie(0x7f, &(0x7f0000000180)=""/88, 0x58) 12:44:36 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x64b0, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb848, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58c3c8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3105, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb898, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 514.346223][T27348] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 514.364216][T27348] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:36 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x300000000000000, 0x0) 12:44:36 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb8fb, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58c55d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x6a48, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3258, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:36 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xbcdd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 514.539595][T27374] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 514.578757][T27374] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:37 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/fscreate\x00', 0x2, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xf4f3, 0x280000) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000100)={{r5}, 0x5, &(0x7f00000000c0)=[0x401, 0x0, 0x200, 0x1, 0xffff], 0x81, 0x0, [0x9, 0x6, 0x3f, 0x81]}) 12:44:37 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x6fe0, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58c805, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xbd79, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x353c, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x400000000000000, 0x0) 12:44:37 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xbe30, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58c80d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x7578, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x35ef, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58c810, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc02c, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 515.164050][T27392] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 515.189413][T27392] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:37 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) syslog(0x3, &(0x7f0000000040)=""/197, 0xc5) keyctl$set_reqkey_keyring(0xe, 0x1) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:37 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x7b10, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58c8c3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc0df, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x369d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x500000000000000, 0x0) 12:44:37 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc275, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58c960, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x80a8, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x37f0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58cd41, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x8640, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 515.400904][T27431] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 515.435382][T27431] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:37 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc3c8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x800000000000000, 0x0) 12:44:37 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58cda5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x8bd8, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x38a2, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) lseek(r3, 0x3f, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) write(r4, &(0x7f00000001c0), 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:37 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58cdf4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc55d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3c35, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc805, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x9170, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 515.670980][T27459] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 515.702587][T27459] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:37 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc80d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xf00000000000000, 0x0) 12:44:37 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58cef8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3d20, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x9708, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:37 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc810, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 515.820888][T27491] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 515.852924][T27491] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:38 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000040)="ac2f0ac43a5e9c2e351f2a692e45d6dec3243f7c0dccf30d059213e3046847a92fc438992075e539b1221e27d868626a3a58504f", 0x61) read(0xffffffffffffffff, &(0x7f0000000140)=""/245, 0x107) 12:44:38 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x9ca0, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58d0a7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc8c3, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3d88, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x2b06080000000000, 0x0) 12:44:38 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58d33d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xc960, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xa238, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58d490, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3dd3, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xa7d0, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xcd41, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 516.596374][T27511] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 516.629540][T27511] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:38 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58d525, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3f00, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xcda5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xad68, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 516.671955][T27511] __quota_error: 46 callbacks suppressed [ 516.671968][T27511] Quota error (device loop4): write_blk: dquota write failed [ 516.706095][T27511] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:38 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x3000000000000000, 0x0) 12:44:38 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58d5d8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xcdf4, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xb300, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4000, @loopback={0x0, 0xac141403}}, 0x1c) [ 516.752167][T27511] Quota error (device loop4): write_blk: dquota write failed [ 516.759603][T27511] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:38 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58d804, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xb898, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f00000001c0), 0xffffff0f) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000680)={&(0x7f0000000300), 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x284, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x48, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x899c5e1d01f51e0b}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xdc, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x144, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040) epoll_create1(0x0) r3 = socket$tipc(0x1e, 0x617bb9e54bdda2a9, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000100)) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f00000002c0)={0x6, 0xff}) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) read(r1, &(0x7f00000001c0)=""/240, 0xf0) 12:44:38 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4086, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xcef8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x41cd, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:38 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58d88b, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 516.915056][T27566] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 516.937976][T27566] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 516.952381][T27566] Quota error (device loop4): write_blk: dquota write failed 12:44:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x3f00000000000000, 0x0) 12:44:39 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xbe30, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd0a7, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58d8d5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4320, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58da28, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd33d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 516.959854][T27566] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 516.974576][T27566] Quota error (device loop4): write_blk: dquota write failed [ 516.985013][T27566] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 517.068101][T27590] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 517.078875][T27590] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 517.093502][T27590] Quota error (device loop4): write_blk: dquota write failed [ 517.103001][T27590] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:39 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000300), &(0x7f0000000340)=0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'rose0\x00', 0x3}, 0x18) ftruncate(r3, 0x7fffffff) 12:44:39 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xc3c8, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4504, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58dd09, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd490, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x4000000000000000, 0x0) 12:44:39 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58ddbc, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd525, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58de6d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd5d8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xc960, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 517.676811][T27607] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 517.690367][T27607] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:39 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x45b7, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000000040)={@desc={0x1, 0x0, @auto="9a0fe03a7ddc8553"}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:39 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58dfc0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x6280000000000000, 0x0) 12:44:39 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd804, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4765, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xcef8, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58e06f, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:39 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd88b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xd490, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58e405, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd8d5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x486a, @loopback={0x0, 0xac141403}}, 0x1c) [ 517.945806][T27642] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 517.992517][T27642] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:40 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') 12:44:40 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xda28, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58e558, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xda28, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x8cffffff00000000, 0x0) 12:44:40 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x48b8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58e5a0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xdd09, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xdfc0, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xddbc, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58e803, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4cfd, @loopback={0x0, 0xac141403}}, 0x1c) [ 518.137223][T27666] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 518.153527][T27666] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:40 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xde6d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xf6ffffff00000000, 0x0) 12:44:40 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xe558, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58e853, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4d9b, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58e99d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xdfc0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xeaf0, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 518.390606][T27705] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:44:40 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58eaf0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xf088, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xc4000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="a8020000", @ANYRES16, @ANYBLOB="010006000000fbdbdf254f00000008000300", @ANYRES32=r5, @ANYBLOB="90007d4808000400010000c200009198610c000300e928dfea77d40439140001004f6d0060a8a1b63a13a998738284141414000200e85220f0e8a73a47793c5f5b4764535714000200f9c45e9b96c3c8fedbbb09e89f39c41208000400477c00001c0002"], 0x2a8}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x1001) r6 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:40 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58ed84, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4e50, @loopback={0x0, 0xac141403}}, 0x1c) [ 518.458285][T27705] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xfeffffff00000000, 0x0) 12:44:40 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xe06f, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58ef35, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xf620, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x504e, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58f037, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xe405, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xe558, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5295, @loopback={0x0, 0xac141403}}, 0x1c) [ 518.602338][T27745] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 518.645964][T27745] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:40 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfa65, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58f088, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xe5a0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x53e8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xff0f000000000000, 0x0) 12:44:40 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x800, 0x30da40) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQFD(r6, 0x4040ae79, &(0x7f0000000000)) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000080)=""/234) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x1c, r8, 0x400, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x24080881) 12:44:40 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58f0ea, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xe803, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfbb8, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x557f, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58f401, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 518.785164][T27764] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 518.801564][T27764] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:40 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x200100fd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x582d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xffffffff00000000, 0x0) 12:44:40 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xe853, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58f4cd, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:40 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0x7ffff000, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 518.940537][T27801] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 518.977983][T27801] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:41 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:41 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xe99d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:41 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580002, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:41 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5832, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:41 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58f568, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:41 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x2) 12:44:41 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xeaf0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:41 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58f620, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:41 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:41 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x58e5, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:41 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580004, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:41 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xed84, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 519.660439][T27820] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 519.694895][T27820] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:42 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x440, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:42 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58f81b, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5980, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x3) 12:44:42 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580005, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xef35, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf037, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5d63, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580006, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58f8ce, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf088, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5dc5, @loopback={0x0, 0xac141403}}, 0x1c) [ 520.482033][T27853] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 520.510924][T27853] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:42 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f0000000080)="b65c006a1a7d723c216437cc16b0ef54bf910c07c12f25d47e918a3df5b695cac238743fc77e2a0f5f1727f86501966ae461da7242ab856b7587742e20fc75326e50f37853873f4326502d68d802e36545018006c37e13cef2b9ce0e8f7d685cceecab033d26381b9212db35de8877d35e7cc071bf1a052700b5f9f9ddd0", 0x7e) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r5, 0xcf7ab000) signalfd4(r4, &(0x7f0000000000)={[0xffff]}, 0x8, 0x80800) 12:44:42 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf0ea, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580007, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58fa65, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x4) 12:44:42 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5f18, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf401, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58fbb8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580008, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x43, 0xfffffffc}, 0x3}}, 0x10) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:42 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x6000, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58fc00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf4cd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x6016, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x5) [ 520.724211][T27891] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 520.749440][T27891] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:42 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf568, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58fd4c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580009, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x60c9, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf620, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:42 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x635d, @loopback={0x0, 0xac141403}}, 0x1c) [ 520.888824][T27930] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 520.900276][T27930] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:43 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58fe80, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf81b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58000a, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x8) 12:44:43 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x64b0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x10) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x80000001, 0x9, 0x5, 0xfffffffe, 0x7}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffff0f) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:43 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58ff00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf8ce, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58000f, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x6547, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r7 = socket$inet(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000080)=0x2, 0xfffffffffffffe2d) connect$inet(r7, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000003c80), 0x38e, 0x62, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000000040)={0x0, @private=0xa010100, 0x4e21, 0x4, 'lc\x00', 0x13, 0x7f, 0x41}, 0x2c) 12:44:43 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x98050000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xf) 12:44:43 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x65fa, @loopback={0x0, 0xac141403}}, 0x1c) [ 521.057546][T27946] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 521.076521][T27946] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:43 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580010, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xfa65, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x2, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x68ad, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xfbb8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x68f5, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xfc00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:43 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580011, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 521.219200][T27981] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 521.242024][T27981] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:44 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xfd4c, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x1, 0x2, 0x7ff, 0x0, r4}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:44 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580021, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x6a48, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x3, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x30) 12:44:44 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x4, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58002b, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xfe80, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x6d2b, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xff00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x5, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 522.012470][T28003] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 522.028653][T28003] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:44 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58002c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 522.085106][T28003] __quota_error: 58 callbacks suppressed [ 522.085200][T28003] Quota error (device loop4): write_blk: dquota write failed [ 522.125537][T28003] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:44 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f0000000040)="6c9617b014a478a7f2b85de4527b4339d3dacfefeb42d0754ac3a04048307e38225fe8c24cc50509d1a735397843de7b8fdbb8ac0f489a53e105b96547aee1e0bb1fd37ddf7b36472bde", 0x4a) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:44 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x6, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58003a, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x6dde, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x300) 12:44:44 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x7, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58003c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) fallocate(r3, 0x1c, 0x10001, 0x1b1df330) r4 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:44 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x6e8d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580060, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x8, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 522.256850][T28038] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 522.271948][T28038] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:44 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580064, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x500) 12:44:44 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0x9, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x6fe0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580078, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 522.329086][T28038] Quota error (device loop4): write_blk: dquota write failed [ 522.349526][T28038] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:44 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback={0x0, 0xac141403}}, 0x1c) [ 522.496419][T28082] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 522.514393][T28082] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 522.533542][T28082] Quota error (device loop4): write_blk: dquota write failed 12:44:44 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/244, 0xf4) 12:44:44 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x7091, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5800b3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xf00) [ 522.545998][T28082] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 522.559057][T28082] Quota error (device loop4): write_blk: dquota write failed [ 522.566728][T28082] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:44 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5800fc, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x7425, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580103, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x6, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:44 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 522.678869][T28103] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 522.706859][T28103] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 522.722212][T28103] Quota error (device loop4): write_blk: dquota write failed [ 522.729970][T28103] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:45 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x4, 0x5, 0x2, 0x5, 0x0, 0x0, 0xccf2d1071e1b2ab1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x4, 0x200}, 0x80, 0xde28, 0x3, 0x4, 0x7, 0x6b}, 0x0, 0xa, r3, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:45 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5801f4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x750f, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x7, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x3000) 12:44:45 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580220, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x7578, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x9, @loopback={0x0, 0xac141403}}, 0x1c) [ 523.480521][T28131] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 523.515880][T28131] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:45 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) accept4(r4, &(0x7f0000000040)=@in={0x2, 0x0, @local}, &(0x7f00000000c0)=0x80, 0x0) write(r1, &(0x7f0000000100)="7f006cade0b6c0c75007c55610227e4cd96ff08212f73c6ce583bf285dd3e53aeeba3114b47b53ec1564b41e7df781711e234437d11c9399b11db8a97a1b2f229502612351aca110e3b3d657ef15dd1c3008b0443e303b384b9b7e87596d9260f53d9cf6421ccff4279dbbd0f1a86b34d58a8bcdbabd399ea901434b127ed0b1000200006d433ade5a33130faacc05", 0x8f) read(r0, &(0x7f00000001c0)=""/253, 0x50c7e3f4) 12:44:45 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580300, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x75c2, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x7, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x3f00) 12:44:45 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xa, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 2: ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @nl=@unspec, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}, 0x0, 0x0, 0x0, 0x0, 0xff95, &(0x7f0000000040)='bridge_slave_1\x00', 0x3, 0x2b0c, 0x6}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:45 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xf, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580301, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x7800, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5803e8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x4000) [ 523.690295][T28163] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 523.724902][T28163] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:45 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x10, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580445, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x7875, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:45 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5804d8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 523.871403][T28202] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:46 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x79bd, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x11, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580500, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x6280) 12:44:46 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000400)=0x5) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r4, &(0x7f00000001c0)={0x1f, 0x0, @fixed}, 0xe) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000180)=0x60, 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000140)=0x6, 0xfffffc8d) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) accept4$unix(r5, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) r6 = dup2(r3, r3) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x48000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="67726500000000000000020000000000ae87586d64990259502472d99ed030651790cc733dd5f4e3ab19a18f9c2f8063488e7aa09cc59c6d3fc2c9f5f880f2c01ab82aeabcb79f1c6b7f0e03f6771fcb111623a846e3ef41ff9875d285bf195d7bd1f44c452b5d5cf4ab62c5f31cb28d7e7286c61af94dedd3c22664600c7a2835e051d341f5ca607e98b68da156ba24279c98e1db79854f0b71834db0b92958ee71744f845d85ca490050322bb10161ccac2eff2cff47022d7b39b8188aaef11c72b3bebb04b495baa25ada12e13a61488de4de15523414332a9a8f864c81d389d7d48e699176dfe1668af0", @ANYRES32=0x0, @ANYBLOB="0f000001000001017fffffff4b27002c00640000f8299078ac1414bbac141438890b3f1414bb00"/55]}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write(r2, &(0x7f00000001c0), 0xffffff0f) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendto$inet(r6, &(0x7f0000000300)="a61553c1660c45e5ef3b300459bb249271ed0105dc6b089b27a4b8de64d770e693984cc4353e58b2593e319813334cddbe7885b00fdbcf6a9bcdaa252a10e69fc4be7b908ecbaf5abcd68d83254a77471494776d66eea185745e2b76d083dbe77e5d6958fa64bcbb4037a58cb4ed1ea334e3b9111aea25a1706956e3562a5b15db44165485ba1e066015d73e204a53a37432bcb75e5b0285", 0x98, 0x40000, 0x0, 0x0) 12:44:46 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x10, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580531, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x7b10, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x21, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x11, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 524.011683][T28219] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x8062) 12:44:46 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580598, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x21, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2b, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5805c8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x7da6, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f00000000c0)="0288efc80100000000000000000a22f1a3a7d6c2f1e734711f7262f4dc64d8f42a45f810708a5e74a92d3b636607cb6b797d3b7dc2a55c8f1dc96a2d2fdefa21870937fc3e43593ae44a4d86a7ffe5cb2d02abe1d0d4ef8ade48e90a70", 0x5d) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:46 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2c, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x7f55, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5805e4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xff0f) [ 524.165388][T28252] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:46 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2c, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3a, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580600, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x8059, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3c, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:46 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x80a8, @loopback={0x0, 0xac141403}}, 0x1c) [ 524.317417][T28279] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:47 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) init_module(&(0x7f0000000040)=')\x00', 0x2, &(0x7f0000000080)='\x00') write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:47 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580700, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x80fe, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x60, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3a, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x8062b) 12:44:47 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3c, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x64, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580897, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x84ed, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x60, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 525.052370][T28298] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:47 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580900, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r3, 0x22, 0x9, 0x5) write(r1, &(0x7f0000000040)="c478de996663513324ae3bef99e2fb8515bf8745a6a4bff257d1c4953d43ad01264e3be4d2544f4dc52f01870c27862b2c4830ca5214e8a0af4e9e28d90ecb9dbb3164f39bec1bd0ae5a06670939422204fa16ea01d070a5d283d89ced135235f3c43ca3b26d528e2dd5c5d2eade51782a1709c34e369930c26e83c4cd8a7fee60628bc44ba79444522a185da9655af0d9301b4db4110fc5c6a43f7f2a890549d2e8859b5c840031be2666c53bbf9105204d62210366bf7ae719d4c5a2ea9d77fd5d56af32aee80bfeae5c0a9ba5f05e89a814d1f51e9342895c9dc64393b67f1ec6cfa62b7f14e3e1c743e1f8a7e496345e2ce49fb925e089cf680fe03c8024ff2b128f05021b5826d1", 0x10a) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x1000000) 12:44:47 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x64, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x78, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x858a, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5809dd, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580a00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x78, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x8640, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xb3, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580b30, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb3, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 525.280320][T28331] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:47 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000300)={r1, 0x2, 0x2, 0x6}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0xa, 0xa, 0x5, 0x0, 0x0, {0xe, 0x0, 0x9}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x78}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xb2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xd736}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4001044) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) sched_getaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000480)) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000004c0)) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fddbdf250f000000080001007063690011000200303030303a30303a31302e300000000008000b000500000006001100ff010000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c5) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000500)={0x1ff, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}}, 0x88) 12:44:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x2000000) 12:44:47 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580d15, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xfc, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x883d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xfc, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x88f0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x103, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x103, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580dc8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:47 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x1f4, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 525.418225][T28361] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:47 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x3000000) [ 525.560792][T28392] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:48 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x1f4, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580f00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x8a85, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x220, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80800, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf253e0000000c0099000500000011000000"], 0x20}, 0x1, 0x0, 0x0, 0x40015}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r1, &(0x7f00000001c0), 0xffffff0f) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 12:44:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x4000000) 12:44:48 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x300, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d580f75, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x220, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x301, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x8bd8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58107b, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3e8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 526.280082][T28408] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:48 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x8d6e, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x300, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x5000000) [ 526.436001][T28439] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:48 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x11, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5810c8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x445, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x901d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x301, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x8000000) 12:44:48 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4d8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x4000) 12:44:48 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3e8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d581100, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xf000000) 12:44:48 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x9021, @loopback={0x0, 0xac141403}}, 0x1c) [ 526.534889][T28456] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:48 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x500, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58150d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x445, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x90d4, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x531, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5815ac, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4d8, @loopback={0x0, 0xac141403}}, 0x1c) [ 526.645870][T28469] EXT4-fs error (device loop2): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:48 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x6fe0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x598, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x9170, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d581660, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x500, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5c8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x2b060800) 12:44:48 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x9552, @loopback={0x0, 0xac141403}}, 0x1c) [ 526.751189][T28486] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:48 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5e4, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58185f, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xf) 12:44:48 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x95b5, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x531, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d581aa5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x9708, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x600, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:48 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d581bf8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x598, @loopback={0x0, 0xac141403}}, 0x1c) [ 526.874363][T28518] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 526.900354][T28531] EXT4-fs error (device loop2): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x30000000) 12:44:49 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x9805, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d581d90, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x700, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5832, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5c8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x897, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d582002, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5e4, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d58f088, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x98b8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x900, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 527.100812][T28560] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 527.136362][T28560] __quota_error: 64 callbacks suppressed [ 527.136370][T28560] Quota error (device loop4): write_blk: dquota write failed 12:44:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x3f000000) 12:44:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58203d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x9b4d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x8cffffff00000000, 0x0) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x600, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x9dd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d582043, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x700, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xa00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x9ca0, @loopback={0x0, 0xac141403}}, 0x1c) [ 527.150665][T28560] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 527.164141][T28560] Quota error (device loop4): write_blk: dquota write failed [ 527.173886][T28560] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:49 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x9d36, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x897, @loopback={0x0, 0xac141403}}, 0x1c) [ 527.273248][T28587] EXT4-fs error (device loop2): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 527.299335][T28587] Quota error (device loop2): write_blk: dquota write failed [ 527.317123][T28606] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 527.326687][T28587] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 527.335163][T28606] Quota error (device loop4): write_blk: dquota write failed [ 527.349045][T28606] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 527.364448][T28606] Quota error (device loop4): write_blk: dquota write failed 12:44:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x40000000) 12:44:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5820f6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xb30, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x9de9, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x900, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x400000000000000, 0x0) 12:44:49 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xd15, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xa09c, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x9dd, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d582100, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 527.372211][T28606] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xa00, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xdc8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x62800000) 12:44:49 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xa0e5, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d582190, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xb30, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x3f000000) [ 527.490986][T28628] EXT4-fs error (device loop2): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 527.511060][T28640] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d582574, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xd15, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xa238, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0xf75, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5825d5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xdc8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xa51a, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d582728, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x8cffffff) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xf00, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x107b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 527.637850][T28661] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 527.668667][T28664] EXT4-fs error (device loop2): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d582827, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xf75, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xfffffff6, 0x0) 12:44:49 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xa5cd, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x10c8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5828da, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x107b, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xa67d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d582b00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xf6ffffff) 12:44:49 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xa7d0, @loopback={0x0, 0xac141403}}, 0x1c) [ 527.777982][T28685] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:49 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x1100, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x10c8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d582b6d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xffffff8c, 0x0) 12:44:49 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xa880, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x1100, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x150d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d582c00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:49 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x15ac, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 527.882219][T28705] EXT4-fs error (device loop2): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:50 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x1660, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 527.945681][T28719] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xfeffffff) 12:44:50 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x150d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xac15, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d582cc0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 527.992633][T28732] EXT4-fs error (device loop2): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0xff0f, 0x0) 12:44:50 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x185f, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xad68, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x15ac, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d582d58, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58300b, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x1aa5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xadb1, @loopback={0x0, 0xac141403}}, 0x1c) [ 528.138449][T28749] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xff0f0000) 12:44:50 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x1660, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xb064, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x1bf8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5830be, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d582cc0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 528.177601][T28767] EXT4-fs error (device loop2): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:50 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d583105, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x1d90, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x185f, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xb1ad, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2002, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xb300, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xb595, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x1aa5, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x203d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xffffff8c) 12:44:50 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d583258, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 2: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) io_setup(0x0, &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000000)=0xffffffff) sendmsg$key(r0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff010000000100000056223c2b7c121900000025000000190004000400000007fd17e5ffff08000400000000008af0ec8a0c22614da704b80c4dc0db3ba2915524a1bbdbcf9b84a44b54473bf34b97c2944daa1842325b7c3f0000000000", 0x6d}], 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket(0x8, 0x5, 0x82) bind(r3, &(0x7f0000000140)=@hci={0x1f, 0x2, 0x3}, 0x80) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@loopback, 0x0, r4}) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) [ 528.337726][T28788] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:50 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2043, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58353c, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xb745, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x1bf8, @loopback={0x0, 0xac141403}}, 0x1c) [ 528.405497][T28815] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 12:44:50 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x20f6, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xb848, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x1d90, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5835ef, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 528.446496][T28815] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 528.483897][T28815] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. 12:44:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00') syz_usb_disconnect(0xffffffffffffffff) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) r1 = signalfd(r0, &(0x7f0000000140)={[0xc7ba]}, 0x8) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x798, 0x4, 0x1000}) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f00000000c0)=0x28) [ 528.518030][T28827] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:50 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xfffffff6) 12:44:50 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2100, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58369d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xb898, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2002, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2190, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5837f0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x203d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xb8fb, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5838a2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:50 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2574, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 528.651361][T28865] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:52 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x802, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006380)="550213a07196529afe0c0440192d7e6b690b2971077c794178f51d5e3ccb8213c2ab2c2f9eeeaac3d26a2f97d4f45f2a79306cb35d2773c4877c1510919c87833403a04e443f0f338e5651891573291dea98a917f4f62456553ef1e4c2ff39f3b6bfa857c2fde23f3bc356a09b1ce900401bba2326ffdbd94f33d8de2e2e88332b80cd5fef8a5482b44a6e9ff53976da78235538407a23561df1fcb2aa25e96496e60b50e63f955b575f6ea992ec1120ef5d703a365589739a47991ed90db8f5bc075ebc30f1ae98d2dd9424afb051063d9f8b29b3891c4a15a7ebb498efd4ad84a1432bcfd862661ff920704ec2481ea567b9accfd0089aa576182565159cb218bc81fee7abf14cf7fd7ad2fbc9f84b66ad2ee9e72efe6de57459a0d8ab7de571be5409f07b18e19573dcabc67e9577aefeb5d076c8b331244dd8f7a4be820a55a59b007298911dbce2d9243184d8db00cc124833f82d55562ad21f64dd300a0a0abeaf8ed2cbd4e373cbc6b40510b77e9742b208a6b6b2166a9b640c6013a905e7f5966613c40b14183adba502a66538f4d146d80e1e38bcfa430b6ab8f23772c41fc291a01817fc447cd8920886669c439c31639781c8a1750182979dc91939a93f2e8df8823a83d4c00a109da1b99aac9f5400b0a18187cd936c69efea3c5959e34ef5ab1b4a230750e4a121540f88d01f97690c18ea599525db59dcdf9915ef90dbc390555742f68c333611731945467777315115fd08343175c16195186d91c317e64a2a557ceb44c930c144aa8f3a1600d064d2fbc841226ec4fdeae163c62a293851c9aa54715cf3caa3bb22012ab2244821077a83b4c7f6aa67752edd136d84df86932c625b6beb4de2499915337bc62c071343ca01d207913718d363abc6e1a0b36a891d46016f586c8b8cda719a52bddad74b872928cb772d86db68d9431686e742ad8e0d83597e94d6dcd01bdb14b8b5f76e56ed293fd7ccfc3d25459b5e2e45d6bc8cf7159d9f819d0935f3cd662e68d1d16d5bb2ee3998d0cc3a680b8fdf553356ccf56c89a5e0ca635faf9224c81902393b1fbafb098a86ebf6942106d6ff686f4ac73fb7c86bfccef7852ac6304c04ef9fdc156540ef072f20a403a869dfe9e8db9c58e1261367d2b8f9ba76a002953ffc679fddb9046fc94bd365e5d932cbf2f5e9b271300d1b90481d72f9fa41eb6e206c96c1096756d4de822999d0396eff77fe86c2bfa2b3dbdb0cfd54b3ddf378a0bbfc4397cac8ba586a3d6b4144e8a9b7a7ac998626afc7d1197c3ca954e48fd7f63ea52edb77e03176720deb4ef7942e604e5a4f500887a77b22760eb33d98d7612ce737af9ee0e78fcb69e7838adae221b4de45e8837bd468f7a405e5f8ed26275b22feb32ba3f12a893479f273e5eaa73658f1dffe09c10baee49dfd8df0501000d74198173d277f7123c4e131fe7db8f74d0390f0222f92c5859d57c709e54b4ad6549185357837b4b7beb28687c35fe62502e1a9a1dbc0f803580a6170b56e08c2d0104fc12c9b47b022bc4cb8474d4b40fe0e13f89a6b6acff2f11d24871ac50c4d10a63080d8f8368a4f982e65ad9fcdd37d809b1b55fa5aeae6377634a973482354ba216d9e24e39edd327063e4852c05db7458f56e6a0dd01440b0ead91570967008128dfc43b48e73fe380033e90848e9fd780be49aba2ff3c97b49f556f8c2c57ee69a15ff01fda1df9ff4434d7aca8049b3146255f870fac754dbb42945165ebbe7279b4998576f6e16332896b48e893f06148b7d470f513efa0f1272ae8578ba66e2042134cbdfaa1cfdd36a7f6c1874e858029429d9bb4f87eca7f7cf1900cd1667caf0f4cb74135301fae9e958f29bba29459de2208f84f4e2764e1fbed3aee309e74fd8598c602d6522f7aea29b73af70bebf10c924f588d7024855cb84f9098cbc7141ce5a6168ecc6d28e774adf9eb6aa9f28838e3e380b7b12dfbcdaaca0401efe633ad4ce12138d8a995b8b27721a2815c5e6331d2fd803c13e3175a5c02c5b5344409b06369a9d4b457db201512f00f53df67ae21fa597f5f3709ebedcfb347d6bf49df34179d0b7169a75a15af29869b2def01a7f5af087e444933ba11d51ce973d59a47efb884daf6cc5258d00a3d7f3ed3cfe450c72cdc5900569717c8699689607e66c5b5d6dc2ff8dff62e2047b30e80877827d2abba12e0af85b77246c7bad649631a9a0853cb79c7ba27f5f6ef5dac4613a7b5d1de79d83958ce4b37a17d593756f9c19cf3fffbcdc70eeb8cbecd6e77cb03e66fa3846bad89a2fe1e284f1fb227340cf4f4ce5bca6289c52410e98966446b4369d261ffc8057d56b625ddb09160298f1a015c1657c88603822566d9b4483801b4f5baaab4c530e61d9378132ec647d2444c04c446d3f2b972a46355ec08e505fa9995624e281292736808c8fa947cc4564c870f03ad931f58f68512c1327eaed18db6a55960ef8177b089011617e64df1d8dc0b9eb3010885f9eab7e098e5711f9e41f74d7b28943586666eb74ff79f67a16ae8d7e75561741c85c5f822f61b2552f877e739a77e20678d2c7a86cc6caa5852278be0cbecc1ddd7674b872e5d2e69c9a7383a33dc8f8c56548da95621211ac70dd89aa1862fa8969138e84810ec854b7b923bf7510ed97cb80037a84a8e66650bba2319dc30bbc3f40820e1b389f684db2d30ef28c470d82acea65419d20f518bbb6a99d734e82ed60fef979e6115fe870498670af117be3cec9aaa577caf1f61d5bbd12ce72a35b77bbc366c6790f44464efafb9cd8f9a097c6ac5423ed20e335c3992cc950b90fcbc7b4c3df2521a31d917af73058c93c1f3e26b47487736691c8b1370ddc613bad413982261e4e036579188b64cd9f39b1b4a32ca356769621c507b37f814ee0480b1a966ee9ebb56d6979a9d38236664fa1fcff19c8f0a429d86632e195e569ec47035c4eafe9185d19dc5e8c635a361af2b4fa33815361c000844615bce501648ee70730d7a1b1da4f0630b1ca90904f80e9e1efd1c8e1b61b05c4f040d5a0430381a53f4a1570491719560a3fb920d6722cafa0755605c955526e618221d1e4e766c35e84bd79ae479b5d178b241662cf9a124825101cc5e1373f3c9ce7625f7f08119fb011acceb88a9ff553639e7eeafc93b6135ecceb6eea4c3dab709005dd7be2f1490d1d648c99058f272bc325ce5fa663f4e68720a5f2b31986c66580a2be4204cf311fb3e5d61310445e942712bf5dc7e66a9370a5a4afb6aa03fefa3f0503d53cad9b79a3ef2ee9000edd8990d75ffa3759dbf0469b6e393bd3627a768bea18f533453b38d17dade925f7ca6babe27adc6fa3048d2a65bd2b0fd840a94ac5f317a1c839738ac89e7b22d1766308dd8247862f304fa51d727a27f0137fe19b371e5946555093e7ca69139c48afca4b4ac46c8d2f56d5e673e8b52dd94857fe953d10ca886c921b6626e869ac794a78d40bf49a025860fd57a0f437a4e650a9db9cddc93f8556482cd3676866d903b0f70601cc4eff564eaab292a4208d0534321e60119ffa6177934a2d1d7a6a1f1803e762c8d30e2a0d5311148bc21e4745b7c3dd57d0a616a2c49569942f2b48360df6c54f7a70f8a585b3a0d54feb7986d7d72ab0e16ba14187af4b9ac5a69428f1f61fe25e13cfb97ea30fd9a43e53b6841cdb766d6b3dcbc70277f2a0a12bff718b5bc50dec6fde5a0e24d23904edd201c8dfd51c1d198e325d65c18ce4d5ed1c6aaec28d40260949ed5c6bdc90f976c76dfdf399a9f9789fa9e176910f7ffb6427c3821fbc83747cb0d2ffe34b0b18fb34ddcaa70bb4624acd1ecf208e428b7fe89ed0cb0db2a7d74b284cf893807b4f76bdcfe9088912c8e83144b78ec8407aa37e94e5454946890174aa6be77e42fa0d764ae36855608d63d269164c3ca6a989232967f168c3f9b41c1204e02d7e9dc06010106f6b41987728775a5c31906bc7dfa33808e5523eacf7c914373ce8e61ea29407040feef8e9511fc04b7f2f9936a3161fccb7deecf83f507840898672fe13846ff8185ee0aa6734a704e4b7ab6ba3fb1c601e57528d68f8955fe42fcfa2ab0faae4008023b8a34ce4f861b5b86b5b507ac1cccf38355c5f0191e8ab29c90627657d6e100957cae6fbb3f0f4ae2049ed3a341732b4730b5bed1dfa97f0976dfebaf03a305da2a79d6b8f2e86f46bd7e257d170728d5aa55f786b5436a221b0d74355d55123fa1c9faf017103c3d6a6ed1e8e26fb8defd944c49929ff5ed4ead4e5782d14b09c9ebd593533c907679aa6a0b94fc8494291acb16e4bd2e4b953ac96f90ccee9e11ec88b4f590289915a6368716dc3e28dafcc5eab060d2c48911f288e501226a5145ea217e834eee7ebf0945e53baa08b8d72acc67fb14dfa47421081434b291a15babb97588c6ed5c7e79299056c70f5362953ef499b7a88c373a23302e3ecbc229824de95f12595f12580a3898533c48ef2385d7f398ce31c3dbb1c02547e84d0210595bad9a149ac653a3537edb419316f244f6a75108997b6597700df352b66acfc191c6b234c5c7beb2acf943f8274e0a159612f4ed440f3ff715fa2cff21b32444e5871a050e33e17695f1e3e7f65f82fa8783870c0c93f961807c6a56e666a5443948e2721570a9068ecaac4839c8209654e2efde43141b1551c9a966812b13bf4f9cbba828a1eb948a1e41a122e175c0ccaa9794660446cf18335ab13d1675a26eb81b1abdc776472d5da139a507f452159e3416532cf59eabfe01e72f4a4bfe86d293a7124ae3478443d00452c1a9be915f54ccee5d857fddb9ee4986c9186857fb4635a2bfb7b8885418fe48536cf60c67c10c729f92a8f91826e85e34e3eb78c186f2ff93b0972fbef4cbed448618e1c2cd7b5cd1b5d529317981b4ed973080615e0b385b41778cf536d9e24fb0ce048ec0dce5b075febaaf34de2cf59d9030e1a9ba924bbb5cb4098d82c511cc42cf9823ba77849bc867a6876096561ac209c2659baae0374ae4abb39b0ca54874eda8425942012fbca984a4c6c21071137eb4399d4c6891222c8aaf43cc78b1c8f2a9cec6b5acd748f9ac4de37b1dd18cd0f8d7f20337fd392ed10258457950184264a559b80c1ef92868676b258a9b579ea604adc0bd388a8b30822af1fa5120aba51e38e1dbaa840472e1f1f0eb86af5ec9f87a7324e49c4c0bd2b9365cb3d8c92acfdf479548acc9aace7a342284eb895b564fbb8bd577d4a310dfcf78f15be69da13b6710abc4cbe240a62798fdfba1b8a019f9c5fb462bf040cce44a1c8bda3819ea42627e71a5bbb0f8f3648daa2d26e81fff4dbaae971deb7dbd407b7583c9afdb7e7dfd7b81fbf1ca84d57b27e059acce70cb27ef3742e81a77889b01795adb0f070077b758d80e7a05dc66da4b9fed081100c3ccb5fd8ccc14dc36173673917dac8c6fa72c5989d0f6e0bd97501cbedd0a97137d3add8444330e1859005804e485fc997da58927f8cefabd995124e6baca61029dc3c4b091234610e04a7e8457c1dbd28a542497035615a990cd675d36eadd703492562404d366ac4359e66e5e8ec9e40cdf96cd1fdfbc0f2280d4358d96bdec660a6ae473723884aa79bd61b96ca11a7175d68a401a0b77882e7a44b3765a582018abe6a367d1478f5b06859e777f35d8f01a39c7960cb26477207dbc9a0a2af6d5beba095c606a9a11ee236aaf91e6b3b6be0639b2a13bf4471acc9f7f2f052d2a86c7ef0f0afe6ceabdc4f99036a05120b0c49cf80ec92b62c766035a5887f4bc8fa1e0c9c69a7b690c7cc2c8870f8e7beacba9b1a27c66f8d02e33c957d923b0a9dc4ef2b3237d2f83c72651966f8b13b24e1aaa5dd0122b75e3afc4cd478e296924349e077fab31a38e38cbea1dbc22689b82a1a4698fa4841bc0c0530dff14f368537c07eeac4a9c2e02e3b21669d0e039af22a4f38d4c21d861968bf312ede1ff02893fc44197363dfd89b5b704de61d609fe1d9013508e5b2276953ba5b1f8018c3a7b3c233d4cb3269f10ee6ca2fa9de79efe709659538108b36c1b71e4d2c3602459d57b8f46ffb541e2a6f4a19438fe3bd14be3e5682ddef68519cb56d79dd5b2b40d1281e84623b01af3c11f7b2cef780d06a0158ac7becf9b7cdc51618db8e7148a93637ca1a875d8ca2db07d78a5554760b792412c7c108335969c676888fa2d180030a8bbaca1c6c36b1fa26461146ddb13c6dc4247f18985a6cdfbdcb5a3455f497cf674fab04c84906627d32a0104d1cb3b1ebb9f398fb6c3a9af34a05ed7bb900335f1b84d2ffa2a589ec46f44399f4eb8f96928aa073f414765347cad3b0e03d551166e5e2ff9a89c15dabe0d46c925767df0f85e9c438ad99f0309400efdda91d4e61d0e592f8fda490b6791e41c098a9a839e040f5580b2d70f714e3b41ca8cb7a21fc2a778eb18a1e2a32c237c665fc4c496732e58b16f8607ab26b07bc59147218a8011068fa1d117b7e13a3c2b8cc6abcc8e184b0c7d061e94c0cf8c61b6ab194f3df5747ce68b3923b5998901c3d1294ba2a0df9fdc7a76c505bfd172a5c5bbcc0df736ec54a2a11b3a26115f1afd382adba6e3fde1e781737c12dab5c19bc5d27e91eab6579298d4b46c60c200d309df433841311008089ce0ab703ad7b7e17426391e22be7548e642cb4eb4703179cb102643aad424ddb72267b6cec2702fcacf19825303858fdeca7d5d3979c900db3ba5be2301c04a78c58ce20ac8f4a6bce27c4865f36511a4adb99ea25ebda5a6701c58347342ac876f80805695b8ad67501a793670fc76221641b89dfc5519389bc5ba56cd17b47bd2e075139c8db24e4c3a332723358ff5b8c6d3dc53fc79982fbbb6b887b36d52232d6d79684fed3add6c84fe070aedbd833165e5b547a3dcbb4977595fa9fb6d7d8b151858c3967b3e599571340568a2a651a3c6dad3a4a24127c28db3f27853cf3738a3476120f845df7803690ec6f97072b2e040995a957dfb6e3c27d55b7ff94f0fc44eb27b7fb81d5601ae88bd6de44163128bf423f1f76bdfaa9a170e43136acb8f5d3bde2b81e381635d4895f224fd8b7d9b04c8115454b0505ee03b332419c6ca3ffec3b127b036144ad4ea5b7d97482d298493e04c994ff2152815607c695991e85065f2c66a36a0c347a1e0b10ecf39500ed1476e9f6bb09ba569236d24459def02c37768956e567ca7c5c1c2ac05fb818d8610da9fb50cb6263edff4b6a165a13a1977f14f3b9101831b0f364f26e803ebede14a32fd37c5067c2be8c50be29d6757767424248ffb425d1780f9f164dd1d5a1999870af4f73bb09f632227351e0c5e24c357b7646edbaa599e0b62c569e32dbf0080dbf509879397c90ce4799b59e8888ae27844c760f901197250d395780e2e1087bd327c155dc31dc5b408e847b031f93e48345d3b32387934c9e68c9556b9d275d1634adecc0204ffb35d1960e736a34f0b07e2e7c4ffaf84ebc7ad39de16f968e1462c5371db06fdd21fe51b08ca295acbfe676e1e683bcb2dc9d3522b86191a151ac590fec45867cd81b97fd9a060e0e26f362b842390ba6dcf66ffedff1d26b87016b7108b4eb4a6dee0384a789d2305b871d7caec898358f01346d089844973aed3ae0a7a8fc6a5cc90a1533e0bb3696e243b28927da1630837a6aff33c2e8af1a7bfbe2ff8060d8df29f6b9643dcbe2e2a8721795636fe7b3187a48dd08a003f27dc2ddd76fb84db15572e0b2b857ed2ffe73526d92ee2a9b13f2693d2023bc7feb2ce769c2e8aa9973be33c77b5f8e147d4c7f414b18c9edc8cfa0169cbcc0c26d59f016fa1e80157bd8dac895a794a7211d83c84c7e003e663f65532018b22ed3e67be4eaf592a8a18b986245f6a8fded9b1562c6a106e04190cf0260905561565a131c3074a7af5a18dad69aa7d62636b9313c1d3e5689671912df51131315f715ea84d57849dce2ab105af433b034501128e2286e1d05384289711dd151ad097484755d32531508949a6e3caea36e6858ecb895f0ff5cb71f8b1cd677405139d5e95c6c34f421b0b1e0898aa74f7a96d7170dc0df19f1b88a0463608d964446967262ff7acafa54b0f95cd0c1b01c232db641cade388b6f348784e18cd33e97c132dfbd501700108b59ac80692371a4bca4f608d9357c6e1458cb372aaf02cf8742b164bf69aab3aa1bd6911202ae7d13f2d1cc27741e4856c9e2d654f72c205a9914969317b5dcefc8137aa564283d64f71209f82fe928836da1de181d6a52c9cdf1be072f8b5c44b063e7e3d629157ae1a768cfdc7105c6b50234b1dc8412f6d98038520fed97db8347cf02924291460fe3d392f21d7ac31aa6e90995756b6dc198c04a6c6eb6c5e41e1eddb8c78feff740273acf8938c0f52c108e5bfd7e559d73346e0b97595125992bfd6aa2097c0ff502482a641f8fa3b2f411a9bbeb9f8c03582ecd1d756013d793bb15b4c1f45f0a988f7bff685c493df30bafebfdcbd6b2ac26a743a0a21443ba776f17f021e80df5eed4926b10be1c952f839f6c87bc2457e1b95f73287895961a0d5874e61da6214b738124fc872376940480705aeb628919d8c9912909823ac384f6a072c72c03c12e2aa8462ce83737244f5525cebafbb491a2a75b4ae8006c2c9bb7d20b190987f5f85afd5b4c1fa8a643820590dcc5e9e55749df8e4aaac858fea295be26fe3891762cfc2fa45f823066280d2afad8653b94a813265f9d9107831181cf8839c72aadff85c745af743e0f22a30c28b4cfea2aa1139790d3e7b491b6b092bbb18bf773b06c3077ad3f1261b8f401e56d4c250c0f30e997e6a546f9cd1482b4717534065ffed131a8e4691e28456abc3ceca5849302cb85eb977a1743e9836ba2ab835f622cbfebbafac8a8edd97e5441ea0f84434b9949c4e5a91a7684947c0370d271e9788bd8222d5f53eee7491d20eb46c7321d5858e427b028ad279cb540c1a547fd18adea0e0d011cb7d251857c1ac23fb502f2ac515aa8c90bfa1bd693313100b6ff278212b06efb23fa836fd97331a9a276d3ec5f2256245674d65d043a072dae13c2649ea2f578583caa55b916ee6d65f510a94ac3ab6eca201f34f2074e631715b40478bafc594cde728d8f695287f2afe8af28859d5389034a75f89140eff05615cc41b06cc6879030cb0dc1788e4f34b3007a4081a4a8c8d8d47860699fd029d7d2a17c1ab2678fac43fedde3eacb441df00e61acf90d208591f70c75dd44892edc144795f86de15db7d9ae43dcb088c6eae8259dd224fdce809d6b4e2f13e6fe8e5b6da195ba0287ecabd18d48d1fd4f1e9438e120484df2e1ad9ceaae247b5b4c639413aef383d948dce80446ea125b67627d25f23e9fdf477351ac2d4f741e88dcd5f91550c71e72b84c90a5282f94bd9d1f08e3e240a0a4bb4cf556a52a994a8064a2c77e41d66077dc039957b795fc28239896eb2068ad16e84196b491dd47e16e12009398db1be984aaf6bf62fdb471a456b32c58f77c158461ac844dfb0858cfc81f591ae0105edde98acf7ea1c09599ae0e5c45b62f039e37a48b7ed91282aba6aab1d2c2b039b3f411b2f6897464a8ff2c333717e60a298be2709389cc644c70ce9c1a483a61e13617f0dc1902c3c8d84ca8ff9c0f43d022f448e100732afb8655c726e33ccdc2785d5ffd7ee533a1676ea93cb7f962dfd8ec47a32ef703fd560965b20a2fcd52207db1ef0046e4ddab569776ee7cf45f476772aafd16622b2613ccbcf4213183d5f079e9bee36d86ef709ae54422e38abe7a1db408b7ebfc72f6ca2b5dc19001142773fd827e72318c4fee1af716211d2401b104a2a40a2a3f4f683da6e5c8d827f798a73d2fa189371efaaf6f6e4c1a8460f6e6e51064dfa079adafc7d1f0472d042258395b2aaff31e943078e44a660b979e91e240628a12074a069b7045f20c9c9a9b2823d52d1a71cbd107b5b888170c2766fb012f60024c0aa6c5a7505cb17d925943b25101a0f9d2e78f40cca2d1266e06a85ab32f8f60dcd9caaad0bb5f7129fce17ab4ab9f2f1d9ffa5b9c3662498737d020614e54cffe567fb6d746c9a33065933c59b0f66429eb43013b43306506e0cb158d79d61938f52ec82a373bf7f03995e63b00fe4b109b3d918c7fb3e9d777771a510e1ba97321d2eff470d390776cd39cefcc1cba44bc0d0a5d7ab038a2cf4ae61285df7fd2c863d3ff26640f140d6c05222f1c7def48851a367405776cb72f19049b9f87e6192227bbddbfad8f8aa4822f6dc383b94e54821de59ed22ebca2babfcc7672606b90efc14eff624f338d0b63fb20fe28b3b3b1588788c12e77e20992e82eae0aa6ecf03a627fd66f251b6ca686142ea50223db2cb10936cb8e619b811a21f914b3f8ed1db52da0a40fc63df4623eeba59309ce490860eaf0020e63265a565102e050340f9148144011ab34c8617a8806153c8ae062293937ba31f789c97e937e7226a5e2715a214120e38fdd66c67e19d40471994d2b84d9f0acbfe2c255c671f3d70a5305dd13e7555dabbbb87cc4e62b1b34cfcc5d1b34a664d79a46d6826d4eebdb5d7df86128a3152ec3bedc77f6c1445732468ed7b91123cf314843e939e369b69d0c657f612a9a9c9ff40c396d2a3c05b27a57dd6198428f7fa2638eae170fe584310c11d0b13a15ec4c1b658d5782b20de550b166f2d89835a34a893cce987b8a807e21686ca78493c906285d7915390bbec275bd5535804b46ffc2de6cd313235ab52b8e04e98b4a7539b6298c974254284dcb32875029c8066988f141034fc156a5fa861826e49140cc2222099608bd279e6f7b3b12db95caae852eccbd8ce691e0bb937a6c83f929c3517a0eb2f247b397c828ea7a97be6cc6a357e47fd52df8be5581ba6b606b81f173656c4f7440b54e644ab775befa10887a1b66e1f27b98708e80c7e2bd8791ab006db14f261e8ee3ff42f3b8a3a899d8146d24896f8f6e3e7e104ef85fcf2f9453847774f63650f63cf6d944ebaabb9d7f5b3f1a3175860acf493534325b9b5da74bbc226c5f346aafe11a974d9accccee2df02a81d971f564bed3f7fac752203ad2c1e8cff090f8ead99885ac203351ec4280a1d016ca6c520061d864ed0fcab91033eff1f8c12de4e831bfa957c1e89921b97c5891538b9dffbf93b424e905923ca5f25bd64a17d3726922b9cdbfeed6c80ff9d06a3cfd0e9497a7b961aaf9538852a8e93eefc8ab49f416ee9d1b22d70472fcd0a774543cd8ef286ef9fc586c3661b3c8dd8de3af588f1d91bbc1d3f354b5a05f0689ca8e75f5ec3e1f75988f9058f0c154a4d2a748b2bf6b8705242a739356329878b0251f2683960a6e18f1e9719623bcbaf3176fbc0dda2125f506475c81c8fb1364de92538400a4278083aa7673e9fdd3a13e75ae0ccf78321dcaf637977fea58969252f6485a0c7644c2b072485dc76748ae76e2a229430b3b5a1d3b7785dc560f5914733425a02c6cbf177e85544b6ea8cdeb42f05707519d79d01f18742305d3fd952246abf5732675f0", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x441, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)=ANY=[], 0xfffffdef) syz_fuse_handle_req(r1, &(0x7f0000008380)="1d3fc0588fbd1ee18d3d558a5847e5909b75ddf492b38ddca57fa90102c1981d37139db16dff89af93eba795c940c2869e89d66dacb9e0aed49166803315f8c1e3a428d3394e202f8983f2a7a557b15c11e2ae42e2f07ac634034c2c6d63fe5505d3cc16fb48a8119d815c5d5391518b847b1334f3d717d9ab5a4c85a58da58c7438e79be665e1b196897bdb462a2266798fb036d83bb993d48bfcb2774216931c85a4fece4b93b635c3f1e651560fcd6ce0b182aaf777cfa0bbbcb6e5e9f4d450fcb95559468684612a5bc1582e273fe8bd58088cf411e97f9b671a81d18e865c2d899716fa59c45d7034afa7ce30b800091bd01ca3df0e083e1457885eba6730a6c70601bba70b2323d6b669898290f43afd84c333ad8c4c3960f70d0e47eb8511071b4e2c6ce2b12332632052cb4367a98593bd39bfdf76d228925d3e7208fcd42d701881c3cad1cf204669e4c598c7ae544bdcabac797503bc1896d36bd0be9edb543d5428cb04daadc0b4e54144fe8a86e1e372cd773a00a3e759fee51aa7cdfedb8c2c13ed709add3235e70c1dff10cc5d473f6c1ea92354c8bb991be1c39f4fa739824cefb41621e8a6cc475599ad2a86f2cd5ffc85684346bd6aec793b06141ed44a4eea375dedfff21d720c725562ae759c5f4737c34d8f1183e6254016f5d54a90114ce910b4c214f35721edbab6b9ef69c89fb3f770915511ea31622c453c53f646b205a0c383cadc845ef9769e99dd58f242b24e98d8d74622f4b7a2b42eeec0881b435404805f177865eeb3263ac63038270dc90b418407cbd984de98df8a449ed3466bbcf6c4b140aa4c0fbcfd4d88e1534e17218c87c32fe2d88807e308fb8c3ab6ca8d145f7c6406459b926e07cb30ce4baddbb0824c0378589b3cf3e16c216163e2966d271b8484a47d3baa946cdae77fd61a10472da8efc228e405ab686ff5a29ccbf91f6cf62dc371e23198b34880f200428f4ca5214c2966c426ce9bdffd7ee2c597d80ff570f44f3a07f5eb24fa4483e2938c98a9e64459f04913564df5d1b29f93b934e95fb4f04dce100324e5d7e6c22b042b8773a792b88405831ffd63a5dec2e764df571214aeef33cbc6e66dc157a86dbeb1d55bb3cbf8e063dd536d0e0ff006ff850ab20fab4023ffaa07b6ab6f8651ee9ed593774a3c3520f595984278b30fb4c0cce3a0afb4836952a7115ac345557f1871511415bdb9f593057624cd8a150954241cd60dca17b688d97416c29b23a767e9184db7e19a74aee2f17d11fb024d906a22dd2ffa2da04c97348b74f4ab99248059d1ee542c5837acb69f1c83f50dc66f9e1674c1b157e1e4f95eb462cc8b3db4cb9fc52086c17f4d5a9fc1f7748dea1fd7af47a7989c1219fd22c91e95bd299d3ef22bc73409d9949422b6177a99b6a9f610b737887f75f718257b5b2dd515acff039886505cf2d8fcf9cf69f74b812121d219ab526480a565a6ec9c2dd4de1b5d2632833a81b5fd445bc049c5dfcb242abe6141943fab1417ba9d2174ed25c521a8e5f6d1354c93176b6d847aa9108b8f49313aa6fdc0a88d08d3cec4f9e623f829dc03aac91c5847d5de8d21dade12e7efadf216ac3746530ffda5d038fd0bc7d105fb8b9fd1cb2e789622b39c0d559c3f887e11d29cbbabfdbe9603ce261549babcba3ecc739203f08238a5ec44719015cf3bdc0eac85c3d72ca34725f09ef8a5fa7cbc3d9197ae877314de309182505e0dcdebb78fcafb35504344770642bb13a22914b9fe76fb948ff03a1a42cd1a799dc0330ff0586aae32fe45238978d2db16629ff8751893e41e9ac72303d91de135313999dde4d93e881b0f1998ab87e5f8e7463261fe872b3ec4ab2344d26a982e286e5e7bfa8126ef4de16fc6107e1b077598e1347cc7b74d57565d4cd9b66e76f6faf51b247ada9672af011db71d48ce36bdc6fa234e6ccbba32a450f837a7180fce70b08a199e7e4c4bd3af39c6b3e78d56f300a45463ff04a55542b01b721229fb35a788769dffe8105171a0cde67cbd9f066834fd24b0ce4ac39a0ab5f96e3f24917385ecc635d7b8be5d9585a5d389316f1323a9916241ad9b490c7505701133451705ad712296bc4519aacf073fa7419a9a81470c315390d4e22820eb0dd0c9605132016f883b8a5e9b9b9e08cdca196abba7f78732280b0b93278f469cc7ba81dc6e764746ea2604d8ce78e301bcf2b9e638849a36fca9f9386f5acf8d9084594c5f20504ad382d4c083c5965f633248f20f1c373e6ae69719bd21355290f50ed84da142127b2c6b0a4cdd4ef4c753edce171d49438ebd31223e8a36f3219a3d6c60ca3a08f88f10bfae1e6a2a5391846ef4e6dae8442b17f7d9f727f47bcd0208185ff18474f1ca1b64580069e35e47c9bff3e421799220dc01eafe2122ba5faff63cd0f275c831e7933391fc180840e9bb5acb5357b196d045853398e93569b56732a637327aaba610de7a00fcb10410457e4493d532c99bb6e95786517add55467f06a23521b7e92be2dca54c9c3df2542384a82d27cfd02bb16e44a9d8c5f07f7e232b794dfbaa8bcd89c359054c188bf5ea5c251bb787282d86b0ec738283e16ed5dd7a74b03cf483fdf8a14a82cf47f4b04185edc4a2dbfd6356927322a15dbe4f35848e6f10eb983797f2886a266b31c0ddda9e2f45282d137f2e6031d2a756a56552a756dcaa24821e3a54fc3cf38c08feb31cd4e32a464d9399b10d7eef1bd627cab3f22775f4ff9d8d5d017ed0d0ad49dad13ea4d1d2cff663d9796b43998956d17bafd8fa49b934dee9b583fe62088b251919291e3b4ca1cb89b9cb035ad8179f2b60d096f96dc1efdd350e09ca32abdd88bc5bc283f0a3fb32588c87e37e2da427a469689c65152558e312536a2fd5edf9bcc19f25501cc9de0fc3df1a595b61ec856455d184f77619ebe89911e165d81597081f903e9bf69e1d51c6fc1880186a356157306c2ef2860d04cbeea0286e4f56d85cdf91cdc2029bb5d1b77debcce4886041e3ca2d6ffd2ec999e5f177418f21979f3135ff517364d99db378ab03df76febd0b2fcf72e7476956428ca20e4be0c63779b112a393a05c5d44d6dc8088dc57a9c0a5b0c5e2a41d9a265a400e62ccaf48aa478f929b354f2013e3287546dc8a811fc7964a50a790888ddc1814039eee62313ddbcf1c55154e386b011b36d8c74888669f334ff7adb1dd421d43b6223ac8beeee98ef1e54e6dfb4fa69ca8a321b3c2edd30143fc17806b04f8bfc403a55467be88cf8507d94f245ca59d1ee050f4312169250ac8ca1eab6eb00df7bccaea896a6e2cdfce521a404913df83bca8e699913b4cfaaf62d00b90eeb3e106eb4aafb7bda8d0dc5383d191d54a253982bb3885dd6afff5f0d85560ab129bb4b411af28740534edae48bc106ac43c3aac6528f48e059d8cf0cf870f9dc6bb669f2b43bc1b42f46a28d82c200717be88d4493572535d2663e7500d865bca452bb7540d163823e78302dbea5cdece7e72b84880423a18fdc1a080e0f0bdc7a58b04b8959ff6f67b224fe72ef22fbf6adf4812e550772fcc5949a157371f1def1a020d951c005140cde6c887040cd035dd972fc75b7b469070b61e1a442a78db4c74f482b950ac7aae40b009c2d6736e9dfeef0e9c9d718409063c57b082beb648fe8b41d3ecf3ded5cb24f7c20edb6ec753c4574a594b62edd81d4deb269b9cde7e2cd63d8d6da58736454e383415574b6f88b0c4dc158be230beb2a67fce06e7d8a70c554ebc79c2d40a31b1c19797000a8596a79e8ef11d87bf2922e8805c455a3da4c4ea2c22ef52ece8082708fc1dbed09872afa250f8351778548e576e97e4b3da023455f8db349fcdf8523f52a56c9b1f3a863652b11ce7cc619d6eef1611e97d7f94ad7dd65f54f88cf49d3ea4490fe76411dd3de5799174d1017b9f3017c2c3f8f30bcf28b68d7833b7a8fa46c3c3b346e1e2f55d680d22c7136f9de526427657ee167cdf90c90142ba705465ce94bb1803a1540b36cd8d22d6d9115c002f2ce96bbac79a573ea858cbb8977d9087f1e0063cea8c86a9671405c4fea89012b241d94a31b15ad36cf388ce3ebe924019aa3ed069bd07a24a46f7f818fda0d6463893621d6531541a57449eaf57dc09c9767a598444e07f79e2beb85362ea93ef04d37e5c4438c8093c026b3c042bf3cfdf11e5db84c05d7cd6bb090ee7686d87551a807fa47c07a84e9fb490f0531d38b86c344ae8b48aff790bedf407b71cc49440bb2300f9d9f73726daa89c7b3ade0b84323a6da6e7639652b004ddd08dcc03a7064866bda6b17ce8c003737a4c3416551a6fb779c414d4fdfcd3b29bd0daeb69c965f8395269019691e1552da684b06febd81d5f71b9bf095ffc581e6333b10f7fc4a3f365c0bce141b95a6fe580a4183713103cae76c776bbd29a8b26a3f2314609d1540eae73e43ba296d7576e2d8769bae7cf7518966b631bb3b215fa6a56b97ea96e116421ba669617ecae72e3aa186b23a289059c16fae6aee21ddcb669592e5068d84287be2d80a72642de4950366b346285b42fd89f49ba3002315c4cb76c12ca0f96b0eb13547e701831646ba663b0622eae281da69c699860728775e6f71ef3e63cc010a2eefe8d4dc3622232d8abc022fbdfb7821f02da20ffc938a7228d5a8eef8a9e4fcdc2ae68ff7ba6f8ff7e7e36fa40d35658e727554f696c4df6a45647bd661450a2404dba0b6021bc7a82df05b4076f86a7f33faa26195eedc2377158fdae5c4704456805c8458f4d643e356736c2378172d11c33dd73b0e760ca9eb5e12d707001955d3e6c85d427a472de77d6c1e28220c8d84eae5c4403484bb0d1b7d207c0c9ea476d2efd0babc5b577fb333bfbccc396471997de9d71b3c2624be1d155ad787635d4fee3f253e5b5f9cfec484cbdd510bad883b79381e8c608ce793cfe175ddcfb49ac6f2cb67474b415568ea90411f455b651c5c6890c94047d86f2c6ccfd787361d6ede1fa2ad89e6dc9fa796405d8927c5197e17e771173ca5ffe4af4864bf6a9ff10ae142ce2ebd664ab94ad37352f36be1afb259c7b8627849af46447ac05600ebc9eb636aa2e56c0c8540857595c114e4c1c45bd735bd73ddbe21823232e1db6ab4b985a681ed4ef505e6025d4d234086f4bd8b422e4e7e31e823bf5ec1d514a328e1f9ed98eb289de2a44229c66382ad64e3a1fddc548786c52c4d74e6e5dfe1e471c20a8bd6a90c1320318e74e7a1f3d7dd04eb81b37b8157db526327bc7bdaf16b181ef71d813588c2747039cd9c62f2afb253ac3a743d083ee53ad6828060b214e69b73b2064e5a01aca0ff1f5b30329ab5fe285193711f4401bfda2c89afbde31adaf1e0a1a9dedac7ae09650183f460f4a93b0e1f48728fa0c2b1b70c5a2ce4cb3d99627f9389d94aeb64e27054cc71b26f7f281874fbfe82ba74e609a2ac05ed5ffaa344fa14091cddf0c77e883a295d529916a16d06b4207e4a72074707ff4f17e9657b6f55d021bfd432de6ee526d26b4f70e5f8da02c23d43cd2b0ae674a573258df27b775db221d416cbab68084c3f5214b199e2fcd84705772984c92c8bcffe37950e8f3fab716f994765d0b09549201bb19ed09364880ed17bfaf8be10e842051f9f096ef864266593b6d97767b20a5530683c88dbda542095e9b57ce6e04b19a682652a4b72cfb17844a0f6a9a1a89f3f26ba56a05117d20f3bfaeee61d7deb85532ddb7d662163aa6386c91f40ffa00db6f4a6523b0b494330a932bc544629c294044fd0ac6049f285923b613bba81064f84ffa71a900fa9732023c8fdb0c480f3154d0dd815e9f2661b3ccf3da7c3127156e3e094041e365c97dcc6e74965a659034701b9961f9b755eff6066448f65601e9e44e12a7423d94027e4f118b5cb9f33bd762520afaecacd404c6dd59dd791c1bbc87277d5028596cb62ff14be1146ea78626e182a5beb492503b18d620543301161de533af3fc1f666727366f10c784e2f0a1bb5f5860b873f03f26b03707c2b8cdca494b08cc98c365009d22f3231c7eb2a24dd6cdfacd577ac334c2a07bbea2af22689fa35cc663013588419b5256fbd52538c9c5e708ffda77c0e97ced2e703ea5229d4eabdeaee8165e80d5867969269c0897bc45d06b96589eba66dad2f98aa72ee0aaa4aa88d6e4fdb0df504131909629eb4fec1de621e14f5445903716fce8049f89a0493607b11e596ce14c2e81ea0905922abd9c8601f558be28d8a409c360a279b86a2a3d09d8c422ef396979b9c3aac8e05b02975419213ac78dc677eb0b3a524ac0baa037012a97fbaade89b939f66d3cbee41e0c05c62b27fb0ae6bce02f7163da983ced2708c16b2351c1460131a9e922f1c1b6981c67faca4710346ed65a4ee56de725bd193bae5574ea91e104f660c4d502b7155eccd61fe4c5b819676b8727492768fad9d13fab5a240ebbb005741d5bbc215139e07be5bb73e3f6b4c4be9519e81c7cd088864c16e4650ac64418133650e26b9ef9020f55438acc9e7161b2c74bd172354ccc051e6c4a6897354bab543a7f742ce799a6e182b86839173acb03f39fdcd4a7637bb48d2e4baf031079687707612c006197ae598d335c463b6d79e0cc3bb7ecc278b9407a0d53381bf3cb65e78adf03a7dee07409b97d2df91413f04828aa2440049b9e8dc4fd907d879fe8480a239beedf8b729dd76042f50985db6761ac1f2e7f0cc48ccc7ba4d0634b0e816c8c68eff96832fbba350afa1107f2da7c53bb9ba8407c30e41da1278f31cbbcc394aafd6a1df76276e39a8d3c27c417753695a74e7252ddd27542b4bc2b0ab4cb001d01411d288749bfbc24ea8472e2906201655ee65d3f435f158d3295590eccb3e84b3f09e12db00382dceb8846fe155eb20580c20781619a894ec92d9a80a422a10b7ea440c4ea0bf3fbbebc89b2c11f7f3e858c16cb823e10203a957bc48959b1d5e3aa69afbb8a5ad1bf617ed59836a289dace4a5224ef9226a6f3d27f869292bfbbf3607f5aa807d294caa053a85a2f54d97f76adf509593bdf46054fac6e4a6b66f173a31d5eade9a38f5106a16704e80d61658ba3799b00919f87c0b02fc4f7c288c0252f46240efa9044d7458f6b92497321f696831565fca86c1c0bb72b4952102b777b466861d22f78dce75b8055dbe3d73168d41059715a23c9ed906e80b2353f32fd43e92d5ce90821bd9c6b4063125339b8f3a8df16ac4b1b0ef85cdbbc6f2acc15ad9e0aeb19bb0617f8623dc029abc232a67447b1ee4f6c4ce234c1ea467a20e8cd21a097f096855a75525c55a2b30c74ff8011476addeafcb18b64ea09600d7056fca53a12a1f89501d00dfcc81f74760fa26e081043ea648148b1ef1e4906e0a65154fde2c554b4c36e97de184dc9169ff3a326cf4a14708fe3c6466c37eed71c44143fd2d5e22443d1b61fe42fcf52207f17422a96b222a1c8ac8656fe98d7f9b5088a725bb3889ce24da112f2cd88575217ca6087cfa659374a82cd7cdb63b47c3979fcf094b62ff72fd4f0adf0750bb3e001ca7772f0733a5fd15e81aea1abd929df4cb195760cceed8d76b20bae92244c685b6a74be268c64a8960e1d6ec3edb9e70986b77eba84051c28900ee9b6c52d4cb6d67eaac2f5cc5bb79c12a5cd23a06f8605b492e28983443d245c963b81ddcba2a561957786a3698e2a0ccc21146a95ca4d7e4cfe16da4b4738a36c95d42f4a83217ebc7d5d1f17ddf5cf87f8ec8de65f0e69491686c973e69faaa179e52a828863797755deed4c1eed27d51a8ba25fb0821b33ffce69425d27ca2ce73c7eb9bb976f3be629c5608993eb49acf22e78c1002ef8d53ba36ad0b913887a105c0c5cf1d2561b5c9e3101925d758039f6d27ab42029d5ae10ca096b71e4cce05b7f8f3cad02f08b6e2148a3cb5f12f5577f52d118ea055b47b136da35283cbc6ab9570d61b54af491665d9bd141c2a11eecad22b00429b8c5d7ca9c94907429da625315826e99f3e61537a00b554228975cb593bdca2b28c1b022e8f4e6b61694fa934fe35501633bb8736021a08f58deb6d3d462fe00b7e9b5ccb7e2f065003b16d0e54c66a9c9d33966135e410aa0bf48f59949771ebb1d38b3902865fc309e7c25bb5b4b7de8611ffe178877c31a8d1b191dbdeed9a2348fff1b6217553bd30d3d9b7eccbf64b872b26aa811199c76915ba43c610bf4169d8ffe09eafc1b0a4eccbb64a031872ab1b3e7a9b9d9cf1e3ed1a1b6a5b4a32ab67edab8fd693360c62c9f34b00dabe47cf1e8428e28d1202e556160f0d4b6ab524107f5ebce2a4782061503cab2a1e1aebfdfa22edd4536dd051a860e9788a5a4691b243893ea6b8f647cd9094b643b9354a600591cbda3d762e7dba265b9c8e6c338151709322a51d4389431047afa1031d18aa0bfeff5d1bc28c5e013eef0a26a7f1eb3c4dbb12a215882897a65608fc3da16a6de1ee7349d9853f6faaed5fbd974fd051627ed762f74341c6ceb06d4d4d635f599aca02471ea5e3dd5012cae344abdc3f990e62fc07aa325757d1bb2ba0bd7833bbfd1ad4aabe86cd389afffab65c73df538d6f9b2da50b9ce1b1be4835f85f2d77a01594d35f48b370b0b11516e8913aef45196a24b290c7491ef39a3a6afd3790b93214837c3247e76ee41a4bc1539caa78adbc5b49d471a9a1724e62c5192ddfca31882350dd906560cb257c3582c4f294193dee760a15b35c9b746c690a4728acce6339496aeb75c2e350ec68acd49683d23140feadc2dc3eb118a8e87281c60a18d22fd12998c4c3c30fa76f9c76d1a994cef1dde10e4b5554e4e4bb0d164e3b85e5ce16cac42403d3b2c687a9ac0b8813a5a2ff6fdfae0c41d9bd4da4f2dad84a309ed3e6f353e9b29cdc9bcfc0c2ea73364554f5f9100b9a01e55fb3d1cd857c9f42378a3ed6f32d87a9cfc4c8366d6a28297128226b6c31612f9b6c1deb481dc930c417f64eb53cf74abc5723375e6370498817273981af928e9d64c2e2c1f7aa46039f2bea921ee5505cdf50f5c18d0bcb6f4729936e9a0ac4cdd2ed63138e68ff225a93b21279722f0174dbdd83b7fc3f6e54f602107c099f18d31fb5d682345858d154475ec38820fb3f9e7d340e9757854944aabd9202d4154b3ae6996828474f0cf82d9162c29706a455253e2b7a236b7c54b7deaec10ac95d71c93f7ae57751c75a98a59be69628454cbc0632ccb25faa8108de381e12cb18758648ff42225d26cb7c3c78745b0fbd371480f58dbae1e32da2f5edd0b487a6cdc0200536c3a45533e91b3241f2d19b008de02891276acf3194deef6b28133da6b7aab644ae69e0d310cb29c9b100eccf9cc2aa140d718ae5a7bb03895ba915f2ed39a681152c6567390465f33d6addfed145bdff55795af7fda6bebea3c98f9b4d0f9538c9513d80c39369506638ac267bd2afbb0d0abe3c44715bae6a8f2fec7bf3178a5c8821c5a6b32692f13153c364ce41a6e6e9201b733bf8fef31d33d058af4891138acd31b38ed8dec427b1f5b29455c4721bc1b69a9fe0c588b134831f57c64fca00fce1b582042bf68c8d4f05e27c685c81677ab6331a084fa16f6df88a6a6c161d4a2043ec2e2586bfa0aff858793f41cf2003092e55205ccd9084422d53245ee37aa8f16604944051fd787754eef613a5b2a0893e0016fd00e7ea3b13c6f6a7f22ef4346790b5f2d2c0482eca4f59441d488edf51a5e71655f2c6a7e6f348e8f364ddce5a57e0252a6ad7dc6170ecd50b267673d3054b53f03bab834de4ff37dfb731ea2a2d678e6791c508b838bfa9f274a8ecf5f499ebd356976e989cdf7f25010cf28169a56ac2b2664bde64611273af5b475546b43056f436845c7987a986150bae9121485ad36d2991e5bb14015bb360a04d989dab9615140841fc55e6cdaf73c914120fc6fd8c1106d75305bd1ff6fff2318ba444caab42268716d5c12dd5afd97abc3a048f3feda20622c1f16061f4ded6ee023bd1fa87496081c08f4dc84d946cf0ed270122b6c36da77690db383187a0270e5e9dc2c7b7f13a6548dbff4a462424973e424ca4f16ee07956527336d26d86a3810b4747912d0d72b66ae8c5cb58c500f6d48c07479d74ad29cb2107d3bc2a0c67ccf82af7e19734902b3f1092a515f71deff0c98babdf0c6a06104c0fd996567bcb0d4970bffce62889c6847316bea599d7a2f35a19adaa500a0aa8c8f50bc44f80b4a0a0f2607a8e78dbe95fac49831e0d54c57b415bce00047d12b16c50c511e96ebb39271d85653edc76f3099effd558bd90e7b8fd0a5fa50af4e424c37c9ef5e907051e61b08ddfe49cb318c37dd5978d0f11672efdbee14949ebd178af583860979deb98354bbe911582b6b4b22aedc7ad1b9e25f4dc500362ec7531789e5b84420d8abc72778dbdedb38ccc1e9aebedc8aa345a96e6af55b57e612d7438aeb0442f5bdaf696a072b72300930c6321bb3f9f0a6d4e42d66df2f3207822cd8758cf349ac1d291a474136dd7506a5d65446f7fe6d8abd942ccc84e93bb12f705d92cdc51a287ff98fb45b4a08f89283b133c14bf1840037118a5d518fdd4fa8c9e49d94d61959db5e8d90220d531efba57910110de3585b4ee4ebd64f89c745ab9d713604092aeb735683dded3de2da3af777371e6c678dae6c86ce8a28ad22cf02c2884987c2f61b2fc764eca2e3f515c35e6697f74243d3a2cf2f9cdf3d3c9cd116b8aeed884d3ecf7da0c1ad282c561f17d59ff9991ff1e31631b5360493f01cfee17f40cc18cc4cc77ff85f8762b6c8b19618f7a916d8caf1e3f3010e8452e1350c0091cc4bc5e2e303a9c3103789c534b511dcc56f895508d1103cede5da804a021cbfc9b0a23025ee40d9f23f03e1c3cdc1152adc9d5fbb394e6ae07202cfc61ba4b2186d88d13ed722afa5543aaca9bbccbf8d972cfceb33a4410947082a56a2132cfabec36e3fe9b18f3a88793e5e64dfa8b61bebcbb952d2c3dfde8e54f7399446e61c4c481f4d25c168b65234483f36daa99bf034542d3354ea93bed1f3770570f503e5e59de2a8d3c61751f4a45d52ee887390a7bf2821219aef4f1fc2746e30decff269ad83b7dec01278f4952c759efdd02e59e642ad22cbcf1819a199ade65d76d75123b011a29b807cfe988eb2153b1cb81a9f13a7b23ee5f3372a97b111d59760a3fc8e2bd06a775553f7b7ebec7fd0e054a00a9eaf46a6310393ee387698ae80d180742c42ebba50ac3a3c615a84d9f6d1077905dacfaa7324ba6f94e88df6ab6898780b2809af5e8d630bc5132d1dc8e0b741ae663a90588d92676b261994c2af2cf4747a8314fb022b0d76f74a518de290376bde67b0156c880a8208b2fd5d22992e6978aa2425865354c441eb12d8c1214afe5531b64920096257a6c439504b8e6d15c5e8abd7701df50b15b8068e43472dcff88c800bef997a76bcb9e6f120d9bc7b302d40685f30c067c68c2db4ee3ffd1d7f146baffa2a9935a07a6136a237d3808ffd06c69f40cff61573fbe36e2fade8bed56a833f86d", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x1000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00') dup2(r0, r1) 12:44:52 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2043, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:52 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x25d5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:52 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xbcdd, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:52 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d583a00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:52 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xfffffffe) 12:44:52 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2728, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:52 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d583c00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:52 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2827, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:52 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xbd79, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:52 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x20f6, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:52 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x28da, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 530.112393][T28883] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:55 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = clone3(&(0x7f0000000340)={0x2000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x14}, &(0x7f0000000140)=""/79, 0x4f, &(0x7f0000000280)=""/164, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x5, {r1}}, 0x58) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x7, 0x5, 0xf9, 0xf7, 0x0, 0x0, 0x92000, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x10001, 0xc15e}, 0x54b6, 0x5, 0x2, 0x9, 0x0, 0x9, 0x3}, r2, 0x10, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xb}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x2e, 0x61, 0x61]}}, 0x0, 0x23}, 0x20) 12:44:55 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d583c35, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2b00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2100, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x100000000000000) 12:44:55 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xbe30, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2b6d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d583d20, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xc02c, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2c00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2190, @loopback={0x0, 0xac141403}}, 0x1c) [ 533.119491][T28921] EXT4-fs mount: 32 callbacks suppressed [ 533.119503][T28921] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:44:55 executing program 2: syz_usb_connect$uac1(0x0, 0xda, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010102000000106b1d01014000010203010902c8"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) accept4$unix(r0, 0x0, 0x0, 0x80000) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000000)={[], 0xd1, 0x0, 0x40, 0x0, 0x6, 0x4, 0x2000, [], 0x50}) 12:44:55 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2cc0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d583d88, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xc0df, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2574, @loopback={0x0, 0xac141403}}, 0x1c) [ 533.183783][T28921] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 533.213860][T28921] __quota_error: 42 callbacks suppressed [ 533.213868][T28921] Quota error (device loop4): write_blk: dquota write failed [ 533.243260][T28921] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 533.271515][T28947] Quota error (device loop4): write_blk: dquota write failed 12:44:55 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xc275, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x2d58, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d583dd3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x25d5, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x200000000000000) 12:44:55 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x300b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:55 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2728, @loopback={0x0, 0xac141403}}, 0x1c) [ 533.286662][T28947] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 533.300657][T28947] Quota error (device loop4): write_blk: dquota write failed [ 533.308063][T28947] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 533.318244][T28921] Quota error (device loop4): write_blk: dquota write failed [ 533.325766][T28921] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 533.390966][T28967] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 533.404452][T28967] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 533.424335][T28967] Quota error (device loop4): write_blk: dquota write failed [ 533.432677][T28967] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 533.489679][ T147] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 533.729621][ T147] usb 3-1: Using ep0 maxpacket: 16 [ 533.889647][ T147] usb 3-1: unable to get BOS descriptor or descriptor too short [ 533.969673][ T147] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.979831][ T147] usb 3-1: config 0 has no interfaces? [ 534.139642][ T147] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 534.148678][ T147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.156668][ T147] usb 3-1: Product: syz [ 534.160838][ T147] usb 3-1: Manufacturer: syz [ 534.165404][ T147] usb 3-1: SerialNumber: syz [ 534.170839][ T147] usb 3-1: config 0 descriptor?? 12:44:58 executing program 2: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x100000000000000) 12:44:58 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d583f00, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xc3c8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2827, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x30be, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x300000000000000) 12:44:58 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3105, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 536.186865][ T1241] usb 3-1: USB disconnect, device number 8 12:44:58 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d584000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x28da, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3258, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xc55d, @loopback={0x0, 0xac141403}}, 0x1c) [ 536.241410][T28989] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 536.257311][T28992] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 536.277680][T28989] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xc805, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 12:44:58 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d584086, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x353c, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x400000000000000) [ 536.293286][T28992] EXT4-fs error (device loop2): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2b00, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x35ef, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5841cd, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2b6d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xc80d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xc810, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2c00, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x10b382) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000900)='.^\xe5\xce\xb2\xc1b#\xf4\x91\xfcS\x96(\xe2\x90\xba-L\xb1^\xe3\xa7\x9b0\xefHEG\x18\xcb\x15\xc1\x1b\x18\xbd\xb6\x14\xe9G\xa6\xbb*\xdff\xe4{2\xd0\x91\x874\xdc(\xa4\xa8?Q\xa6\xee\xb54\xd0\x05.`\xe7\x04@\xff\x83\n\xb9\x12\xaf\x83\x04\x1e\x8b\xca\x17Y\xb6\x94\x99\x90\x9f\xac\xcf\xc1\xb4\xfb\x9c)\xa0xY4\xaf\xe3\xd5R\x012\xd2R', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000280)="dfe3", 0x2}, {&(0x7f0000000000)="1762863abad94f55bede99c9bc972d7b5b736dc7e0680b47347e9287dd8c24dd6b6a8f31160681620b9262d9b70661cd871c407ff00d3b46c5a058666f35177ddf721b888ea411cb6fe5be72d25baa80b467e557d2bb7f9e9f1484f7a813cffae605bab5500ce4f1", 0x68}, {&(0x7f00000000c0)="dbd955c9efdb7a7fdb5ee987b08538005a04e90e0b642bcc7a288f857abf9a1aabb3410ffe67d0fb14f72d58136db80ca3502f8e0140a0b699764d142a8e98a8e12f46ec341f", 0x46}, {0x0}], 0x5, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_IRQFD(r5, 0x4040ae79, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x10000, 0x1, 0xd000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000580)={0x1f, @fixed={[], 0x10}}, 0x8) sendfile(r0, r0, 0x0, 0x24002d00) 12:44:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xc8c3, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2cc0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x2d58, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x500000000000000) 12:44:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xc960, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x369d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d584320, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x300b, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x37f0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xcd41, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d584504, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) accept4$unix(r5, 0x0, 0x0, 0x80000) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8}, @RTA_PRIORITY={0x8, 0x1e}]}, 0x2c}, 0x1, 0xfeffffff00000000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 536.490633][T29044] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 536.507313][T29044] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x30be, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xcda5, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3105, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x800000000000000) 12:44:58 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5845b7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xcdf4, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x38a2, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3258, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d584765, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:58 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58486a, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 536.646237][T29079] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 536.659982][T29079] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:58 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3a00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 536.764695][T29095] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 536.779819][T29095] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:59 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x800, 0xfffff855, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9) 12:44:59 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xcef8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x353c, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3c00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5848b8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xf00000000000000) 12:44:59 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d584cfd, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3c35, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d584d9b, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x35ef, @loopback={0x0, 0xac141403}}, 0x1c) [ 537.485637][T29119] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:44:59 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xd0a7, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3d20, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 537.523631][T29119] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:59 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind(r1, &(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x48, 0x4}, 0x80) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r3, 0x0) ftruncate(r0, 0x48280) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x74b000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x2}]) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x400a053, r5, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) 12:44:59 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d584e50, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3d88, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x369d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x2b06080000000000) 12:44:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3dd3, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58504e, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xd33d, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x37f0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x3f00, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xd0a7, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d585295, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xd490, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4000, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 537.659891][T29155] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 537.690722][T29155] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:44:59 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x3000000000000000) 12:44:59 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5853e8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x38a2, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 2: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x2b06080000000000) 12:44:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4086, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xd525, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3a00, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xd5d8, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x41cd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3c00, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xd88b, @loopback={0x0, 0xac141403}}, 0x1c) 12:44:59 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58557f, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 537.837382][T29192] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 537.888288][T29192] EXT4-fs error (device loop2): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 537.889680][T29193] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:45:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x3f00000000000000) 12:45:00 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4320, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58582d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xd8d5, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3c35, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000002040)='ns/time_for_children\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r1) write(r0, &(0x7f0000000340), 0x41395527) accept4$unix(r0, 0x0, 0x0, 0x80000) ioctl$PPPIOCDISCONN(r0, 0x7439) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "e581430436f21eef", "49f237298626059fabc3790bfaf00d68", "03b9a27a", "adb810cc7b6e66e9"}, 0x28) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) 12:45:00 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d585832, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4504, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 537.994251][T29193] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:45:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3d20, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xda28, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5858e5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x45b7, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x4000000000000000) 12:45:00 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d585980, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4765, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3d88, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xdd09, @loopback={0x0, 0xac141403}}, 0x1c) [ 538.119443][T29235] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 538.138775][T29235] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 538.213320][T29250] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 538.224594][T29250] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 538.241481][T29250] __quota_error: 70 callbacks suppressed [ 538.241488][T29250] Quota error (device loop4): write_blk: dquota write failed [ 538.254655][T29250] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 538.266012][T29250] Quota error (device loop4): write_blk: dquota write failed [ 538.273862][T29250] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 538.286845][T29250] Quota error (device loop4): write_blk: dquota write failed [ 538.294458][T29250] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 538.304513][T29255] Quota error (device loop4): write_blk: dquota write failed [ 538.311928][T29255] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:45:00 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xdd09, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x486a, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3dd3, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d585d63, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xddbc, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x6280000000000000) 12:45:00 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x48b8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xde6d, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d585dc5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3f00, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 2: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x3d20, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:00 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4cfd, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 538.899852][T29268] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:45:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4000, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="39000000130009006900000000000000ab008000200000004600010707000014190001001000000800005068000000000000ef38bf461e59d7", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001000090468fe07002b0000fe0100ee0020000000450001070307001404001800120003000e0400"/57, 0x39}], 0x1) 12:45:01 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d585f18, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4d9b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xdfc0, @loopback={0x0, 0xac141403}}, 0x1c) [ 538.948437][T29268] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 539.010726][T29297] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 539.014578][T29268] Quota error (device loop4): write_blk: dquota write failed [ 539.048139][T29302] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. 12:45:01 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xe06f, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d586000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x4e50, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4086, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x8cffffff00000000) 12:45:01 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open$cgroup(0x0, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newlink={0x38, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x42, 0x0, &(0x7f00000000c0)={0x0, 0xffffffff}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x5e37b000) setpriority(0x2, 0x0, 0x1) [ 539.054719][T29268] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota 12:45:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x504e, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d586016, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xe405, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x41cd, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5295, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5860c9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58635d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xf6ffffff00000000) 12:45:01 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d586400, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4320, @loopback={0x0, 0xac141403}}, 0x1c) [ 539.174245][T29316] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 539.186468][T29316] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:45:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x53e8, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 2: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000008c0)={0x0, {{0x2, 0x4e21, @broadcast}}}, 0x88) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x240, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r4 = creat(&(0x7f00000003c0)='./bus\x00', 0x28) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000100)=0x6) ftruncate(r4, 0x208200) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00', 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 12:45:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x557f, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xe558, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4504, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5864b0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xfeffffff00000000) [ 539.325663][T29345] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 539.344411][T29345] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:45:01 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d586547, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x582d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x45b7, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xe5a0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 2: clone(0x20082804ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setreuid(r1, r1) setpriority(0x0, 0x0, 0xecffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='bpf\x00', 0x201200a, 0x0) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001040, 0x0) mount$bpf(0x20000000, &(0x7f0000000140)='./file0/file0/file0\x00', 0x0, 0xc50c4, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000180)={0x8, 0x5}) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x5890, 0x0) mount(0x0, &(0x7f0000000380)='./file0/file0/file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) 12:45:01 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5865fa, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4765, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5832, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xe853, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5868ad, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 539.490070][T29371] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:45:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x58e5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 539.527172][T29371] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:45:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x486a, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5868f5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5980, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xe99d, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xff0f000000000000) 12:45:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x5) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0xa823, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r2 = socket(0x11, 0x800000003, 0x8) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)='F', 0x1}], 0x1}, 0x80) 12:45:01 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xeaf0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5d63, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d586a48, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x48b8, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5dc5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xed84, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d586d2b, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4cfd, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:01 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x5f18, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 539.721469][T29407] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:45:01 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xef35, @loopback={0x0, 0xac141403}}, 0x1c) [ 539.765482][T29407] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:45:01 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0xffffffff00000000) [ 539.896866][T29432] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 539.920201][T29432] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 539.949263][ T7] device bridge_slave_1 left promiscuous mode [ 539.956550][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.975633][ T7] device bridge_slave_0 left promiscuous mode [ 539.989585][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.378612][T29439] cgroup1: Unknown subsys name 'perf_event' [ 541.384752][T29439] cgroup1: Unknown subsys name 'net_cls' [ 541.419295][T29439] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.426318][T29439] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.433777][T29439] device bridge_slave_0 entered promiscuous mode [ 541.440658][T29439] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.447654][T29439] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.455092][T29439] device bridge_slave_1 entered promiscuous mode [ 541.500113][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 541.507440][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.516335][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 541.524878][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.533286][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.540373][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.547984][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 541.556467][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 541.564902][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 541.573200][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.580223][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.592577][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 541.601769][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 541.618845][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 541.627089][ T117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 12:45:03 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d586dde, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4d9b, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6000, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xf037, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x1}, {&(0x7f0000000140)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000300)="585a3ae82d76ffffffff00000000e11f90aab1ab4912fb4df25c6c1ce2", 0x1d, 0x640}, {&(0x7f00000002c0)="020000000000000000000000190007000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="edf4655f000000000900"/29, 0x1d, 0x935}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000100)="111fc0d90100000080000000803a090000008a6aac1820ed3f1bb4344bc73af00ea6ac0dbff75e58959cc9bdf44daacaed104fe180cefa4c05bfc7bf", 0x3c, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x0) [ 541.644948][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 541.653241][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 541.662770][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 12:45:03 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6016, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d586e8d, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x4e50, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xf088, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x60c9, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 541.727852][T29453] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 12:45:03 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x504e, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xf0ea, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x635d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d586fe0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6400, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5295, @loopback={0x0, 0xac141403}}, 0x1c) [ 541.821559][T29453] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 12:45:03 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x64b0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xf4cd, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d587091, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:03 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x53e8, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d587425, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6547, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x557f, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="a8020000", @ANYRES16, @ANYBLOB="010006000000fbdbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="90007a8008000400010000000c0003003e18c260c09198610c000300e928dfea77d40439140001004f6d0060a8a1b63a13a998738284141414000200e85220f0e8a73a47793c5f5b4764535714000200f9c45e9b96c3c8fedbbb09e89f39c41208000400477c00001c0002"], 0x2a8}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r1, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x10001, 0x2a}}}}, ["", "", "", "", "", ""]}, 0x28}}, 0x200000d0) 12:45:04 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xf568, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d58750f, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x65fa, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x582d, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d587578, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xf5ff, @loopback={0x0, 0xac141403}}, 0x1c) [ 542.049230][T29504] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 12:45:04 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x68ad, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5832, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5875c2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 542.090869][T29504] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:45:04 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x68f5, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x58e5, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d90100000080000000803a090000008a6aac1820ed3f", 0x19, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000003c0)="3073e663b108881d58d3605cd92abea88a924866c2fc565b62bce134b7c2d3ff22429c5d19999873ef7e58d59a46f9cfdb39ea9e84e0e9a75695a393d7f0cc4cac655d26c34f50f7642ff890a5ec0d8c2abbd4f3cb6119b207d39959ec90aad4ebf142ad739725dcfce254a8694ae458caf97ad99e5551c94a5f753c722f0e72065c7d9b2c214f85e4a933b21dcd2956eb5e6e25bb605722f4b94e7d8101ba9ee99dc1d2b9a843ef25029e61411c65d830d3663d7ed08442ee60370afafce93269b8d055909a88c3da4f3692827323d08fdf926b8c8a7f348ed9d649810a2a1bbc68490ea082b652bcc32bb87414d8eb15dec51f79ba89b5", 0xf8, r0}, 0x68) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x0) 12:45:04 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xf620, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d587800, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6a48, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5980, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xf81b, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5d63, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xf8ce, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6d2b, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5dc5, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d587875, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 542.269680][T29538] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 542.290333][T29538] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters 12:45:04 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6dde, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) shutdown(r0, 0x1) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000000180)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000000000)="03", 0x1, 0x640}, {&(0x7f00000002c0)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000340)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000000300)="111fc0d901000000baa07e9b7b801a796e803a090000008a6a", 0x19, 0x30000}], 0x0, &(0x7f00000004c0)=ANY=[]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x0, 0x400}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2dfebb0ed9bc7d7, {0x43}}, 0x10) fcntl$lock(r1, 0x6, &(0x7f0000000440)={0x0, 0x3, 0x1, 0x24a2}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000480)="0e4b442ad795034cae21d33863c36604", 0x10) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', 0x0, 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:hald_dccm_exec_t:s0\x00', 0x26, 0x0) 12:45:04 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xfa65, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d5879bd, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x5f18, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6e8d, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xfbb8, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x6000, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xfc00, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100003ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0x6016, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x6fe0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100202ff4d56d0bf7e", 0xfffd, 0x2d587b10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) 12:45:04 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x2c) sendto$inet6(r0, &(0x7f0000000100)="ff100002ff4d56d0bf7e", 0xfffd, 0x2d580000, &(0x7f00000000c0)={0xa, 0x0, 0xfc02, @loopback={0x0, 0xac141403}}, 0x1c) [ 542.499553][T29581] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 542.533793][T29581] EXT4-fs error (device loop4): ext4_mb_generate_buddy:747: group 0, block bitmap and bg descriptor inconsistent: 32768 vs 25 free clusters [ 542.570607][T29581] BUG: unable to handle page fault for address: fffffbfff140000c [ 542.578342][T29581] #PF: supervisor read access in kernel mode [ 542.584307][T29581] #PF: error_code(0x0000) - not-present page [ 542.590277][T29581] PGD 23fff3067 P4D 23fff3067 PUD 23ffb6067 PMD 0 [ 542.596781][T29581] Oops: 0000 [#1] PREEMPT SMP KASAN [ 542.601968][T29581] CPU: 0 PID: 29581 Comm: syz-executor.4 Not tainted 5.4.84-syzkaller-00151-gcd5f5cb9fe67 #0 [ 542.612098][T29581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.622155][T29581] RIP: 0010:check_memory_region+0x70/0x2f0 [ 542.628083][T29581] Code: 49 bd 01 00 00 00 00 fc ff df 4d 01 ea 4d 89 d6 4d 29 ce 49 83 fe 10 7f 2b 4d 85 f6 0f 84 b9 01 00 00 4c 89 cb 4c 29 d3 66 90 <45> 0f b6 19 45 84 db 0f 85 03 02 00 00 49 ff c1 48 ff c3 75 eb e9 [ 542.647677][T29581] RSP: 0018:ffff8881e667f5f0 EFLAGS: 00010297 [ 542.653733][T29581] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff84415146 [ 542.661696][T29581] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8a000061 [ 542.669668][T29581] RBP: ffff8881e667f6c0 R08: dffffc0000000000 R09: fffffbfff140000c [ 542.677632][T29581] R10: fffffbfff140000d R11: 0000000000000004 R12: 1ffffffff140000c [ 542.685680][T29581] R13: dffffc0000000001 R14: 0000000000000001 R15: ffff8881e667f640 [ 542.693641][T29581] FS: 00007f0c4f57d700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 542.702556][T29581] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 542.709127][T29581] CR2: fffffbfff140000c CR3: 00000001a6095000 CR4: 00000000001406f0 [ 542.717086][T29581] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 542.725045][T29581] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 542.733002][T29581] Call Trace: [ 542.736286][T29581] _raw_spin_lock+0x96/0x1b0 [ 542.740869][T29581] ? _raw_spin_trylock_bh+0x1a0/0x1a0 [ 542.746235][T29581] ? ext4_get_inode_usage+0x864/0xa90 [ 542.751598][T29581] ? mark_buffer_dirty+0x334/0x380 [ 542.756702][T29581] ? __ext4_handle_dirty_metadata+0x2d8/0x910 [ 542.762766][T29581] dquot_add_inodes+0x32/0xa90 [ 542.767520][T29581] ? _raw_spin_trylock_bh+0x1a0/0x1a0 [ 542.772884][T29581] ? __ext4_journal_get_create_access+0x2e0/0x2e0 [ 542.779286][T29581] ? __quota_error+0xb3/0x1b0 [ 542.783952][T29581] __dquot_transfer+0x65b/0x29c0 [ 542.788883][T29581] ? __brelse+0x54/0x90 [ 542.793028][T29581] ? up_write+0x187/0x280 [ 542.797346][T29581] ? up_read+0x10/0x10 [ 542.801403][T29581] ? dquot_free_inode+0xa30/0xa30 [ 542.806418][T29581] ? _raw_spin_lock_irqsave+0xf8/0x210 [ 542.811866][T29581] ? check_preemption_disabled+0x9e/0x330 [ 542.817573][T29581] ? debug_smp_processor_id+0x20/0x20 [ 542.822934][T29581] ? percpu_counter_add_batch+0x14d/0x170 [ 542.828642][T29581] ? ext4_acquire_dquot+0x1f6/0x280 [ 542.833832][T29581] dquot_transfer+0x347/0x4f0 [ 542.838495][T29581] ? __dquot_transfer+0x29c0/0x29c0 [ 542.843680][T29581] ? in_group_p+0x7a/0x1f0 [ 542.848086][T29581] ? __ext4_journal_start_sb+0x3ad/0x420 [ 542.853717][T29581] ext4_setattr+0x79f/0x1fb0 [ 542.858300][T29581] ? make_kgid+0x3a0/0x3a0 [ 542.862703][T29581] ? security_inode_setattr+0xfa/0x130 [ 542.868149][T29581] ? ext4_write_inode+0x650/0x650 [ 542.873159][T29581] notify_change+0xb13/0x1010 [ 542.877828][T29581] chown_common+0x3a1/0x660 [ 542.882320][T29581] ? do_fchownat+0x240/0x240 [ 542.886900][T29581] ? debug_smp_processor_id+0x20/0x20 [ 542.892302][T29581] ? __mnt_want_write+0x1f5/0x270 [ 542.897315][T29581] do_fchownat+0x165/0x240 [ 542.901729][T29581] ? __ia32_sys_chmod+0x1c0/0x1c0 [ 542.906746][T29581] ? __ia32_sys_clock_settime+0x2a0/0x2a0 [ 542.912546][T29581] __x64_sys_lchown+0x81/0x90 [ 542.917214][T29581] do_syscall_64+0xcb/0x150 [ 542.921709][T29581] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 542.927585][T29581] RIP: 0033:0x45e149 [ 542.931467][T29581] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 542.951058][T29581] RSP: 002b:00007f0c4f57cc68 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 542.959457][T29581] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 542.967506][T29581] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000020000080 [ 542.975465][T29581] RBP: 000000000119bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 542.983423][T29581] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 542.991382][T29581] R13: 00007fffc04e570f R14: 00007f0c4f57d9c0 R15: 000000000119bf8c [ 542.999339][T29581] Modules linked in: [ 543.003226][T29581] CR2: fffffbfff140000c [ 543.007366][T29581] ---[ end trace 62a0cf6cac8fe001 ]--- [ 543.012815][T29581] RIP: 0010:check_memory_region+0x70/0x2f0 [ 543.018606][T29581] Code: 49 bd 01 00 00 00 00 fc ff df 4d 01 ea 4d 89 d6 4d 29 ce 49 83 fe 10 7f 2b 4d 85 f6 0f 84 b9 01 00 00 4c 89 cb 4c 29 d3 66 90 <45> 0f b6 19 45 84 db 0f 85 03 02 00 00 49 ff c1 48 ff c3 75 eb e9 [ 543.038203][T29581] RSP: 0018:ffff8881e667f5f0 EFLAGS: 00010297 [ 543.044270][T29581] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff84415146 [ 543.052233][T29581] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8a000061 [ 543.060202][T29581] RBP: ffff8881e667f6c0 R08: dffffc0000000000 R09: fffffbfff140000c [ 543.068161][T29581] R10: fffffbfff140000d R11: 0000000000000004 R12: 1ffffffff140000c [ 543.076155][T29581] R13: dffffc0000000001 R14: 0000000000000001 R15: ffff8881e667f640 [ 543.084121][T29581] FS: 00007f0c4f57d700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 543.093031][T29581] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 543.099598][T29581] CR2: fffffbfff140000c CR3: 00000001a6095000 CR4: 00000000001406f0 [ 543.107558][T29581] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 543.115516][T29581] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 543.123473][T29581] Kernel panic - not syncing: Fatal exception [ 543.130149][T29581] Kernel Offset: disabled [ 543.134453][T29581] Rebooting in 86400 seconds..